CVE-2008-2571

Cross-site request forgery (CSRF) vulnerability in LimeSurvey (formerly PHPSurveyor) before 1.71 allows remote attackers to change arbitrary quotas as administrators via a "modify quota" action.

Link	Resource
http://sourceforge.net/project/shownotes.php?group_id=74605&release_id=603922
http://www.limesurvey.org/content/view/102/1/lang,en/
http://www.securityfocus.com/bid/29506	Patch
http://secunia.com/advisories/30495	Vendor Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/42807

Configuration 1

cpe:2.3:a:limesurvey:limesurvey:*:*:*:*:*:*:*:* cpe:2.3:a:limesurvey:limesurvey:1.52:*:*:*:*:*:*:* cpe:2.3:a:limesurvey:limesurvey:1.49:*:*:*:*:*:*:*

---

Published : 2008-06-06 06:32

Updated : 2017-08-08 01:31

---

NVD link : CVE-2008-2571

Mitre link : CVE-2008-2571

No products.

CWE-79