Description
SQL injection vulnerability in admin/admin.php in LimeSurvey before 1.91+ Build 120224 allows remote authenticated users to execute arbitrary SQL commands via the id parameter in a browse action. NOTE: some of these details are obtained from third party information.
References
- 79688 vdb-entry
- http://www.limesurvey.org/en/stable-release
- limesurvey-admin-sql-injection(73564) vdb-entry
- http://freecode.com/projects/limesurvey/releases/342070
- 48184 third-party-advisory