CVE-2020-36993

概要

参考情報

• LimeSurvey/LimeSurvey commit 3712854 · Patch
• exploit-db.com/exploits/48762 · Exploit
• limesurvey.org · Product
• vulncheck.com/advisories/limesurvey-survey-menu-persistent-cross-site-scripting · Third Party Advisory

limesurvey のその他の脆弱性

• CVE-2025-70797中 6.1Cross Site Scripting vulnerability in Limesurvey v.6.15.20+251021 allows a remote attacker to execute arbitrary code via the Box[title] and …
• CVE-2025-63238中 6.1A Reflected Cross-Site Scripting (XSS) affects LimeSurvey versions prior to 6.15.11+250909, due to the lack of validation of gid parameter i…
• CVE-2025-56422緊急 9.8A deserialization vulnerability in LimeSurvey before v6.15.0+250623 allows a remote attacker to execute arbitrary code on the server.
• CVE-2025-56421高 7.5SQL Injection vulnerability in LimeSurvey before v.6.15.4+250710 allows a remote attacker to obtain sensitive information from the database.
• CVE-2025-41076中 6.5In version 6.13.0 of LimeSurvey, any external user can cause a 500 error in the survey system by sending a malformed session cookie. Instead…