CVE-2020-11456

Mô tả

Tham khảo

• packetstormsecurity.com/files/157114/LimeSurvey-4.1.11-Cross-Site-Scripting.html · Exploit
• LimeSurvey/LimeSurvey commit 04b118a · Patch
• exploit-db.com/exploits/48289 · Exploit

Lỗ hổng khác của limesurvey

• CVE-2025-70797TRUNG BÌNH 6.1Cross Site Scripting vulnerability in Limesurvey v.6.15.20+251021 allows a remote attacker to execute arbitrary code via the Box[title] and …
• CVE-2025-63238TRUNG BÌNH 6.1A Reflected Cross-Site Scripting (XSS) affects LimeSurvey versions prior to 6.15.11+250909, due to the lack of validation of gid parameter i…
• CVE-2025-56422NGHIÊM TRỌNG 9.8A deserialization vulnerability in LimeSurvey before v6.15.0+250623 allows a remote attacker to execute arbitrary code on the server.
• CVE-2025-56421CAO 7.5SQL Injection vulnerability in LimeSurvey before v.6.15.4+250710 allows a remote attacker to obtain sensitive information from the database.
• CVE-2020-36993TRUNG BÌNH 5.4LimeSurvey 4.3.10 contains a stored cross-site scripting vulnerability in the Survey Menu functionality of the administration panel. Attacke…