VYPR
Get started
← All advisories
Unrated severityNVD Advisory· Published Sep 19, 2012· Updated Apr 29, 2026

CVE-2012-4994

CVE-2012-4994

Description

SQL injection vulnerability in admin/admin.php in LimeSurvey before 1.91+ Build 120224 allows remote authenticated users to execute arbitrary SQL commands via the id parameter in a browse action. NOTE: some of these details are obtained from third party information.

Affected products

15
  • Limesurvey/Limesurvey15 versions
    cpe:2.3:a:limesurvey:limesurvey:*:*:*:*:*:*:*:*+ 14 more
    • cpe:2.3:a:limesurvey:limesurvey:*:*:*:*:*:*:*:*range: <=1.91\+
    • cpe:2.3:a:limesurvey:limesurvey:1.01:*:*:*:*:*:*:*
    • cpe:2.3:a:limesurvey:limesurvey:1.50:*:*:*:*:*:*:*
    • cpe:2.3:a:limesurvey:limesurvey:1.52:*:*:*:*:*:*:*
    • cpe:2.3:a:limesurvey:limesurvey:1.53\+:*:*:*:*:*:*:*
    • cpe:2.3:a:limesurvey:limesurvey:1.70\+:*:*:*:*:*:*:*
    • cpe:2.3:a:limesurvey:limesurvey:1.71\+:*:*:*:*:*:*:*
    • cpe:2.3:a:limesurvey:limesurvey:1.72:*:*:*:*:*:*:*
    • cpe:2.3:a:limesurvey:limesurvey:1.80\+:*:*:*:*:*:*:*
    • cpe:2.3:a:limesurvey:limesurvey:1.81\+:*:*:*:*:*:*:*
    • cpe:2.3:a:limesurvey:limesurvey:1.82\+:*:*:*:*:*:*:*
    • cpe:2.3:a:limesurvey:limesurvey:1.85:*:*:*:*:*:*:*
    • cpe:2.3:a:limesurvey:limesurvey:1.86:*:*:*:*:*:*:*
    • cpe:2.3:a:limesurvey:limesurvey:1.87\+:*:*:*:*:*:*:*
    • cpe:2.3:a:limesurvey:limesurvey:1.90\+:*:*:*:*:*:*:*

Patches

0

No patches discovered yet.

Vulnerability mechanics

AI mechanics synthesis has not run for this CVE yet.

References

5

News mentions

0

No linked articles in our index yet.