VYPR
← All advisories
Critical severity9.1OSV Advisory· Published Feb 28, 2018· Updated Jun 17, 2026

CVE-2018-7556

CVE-2018-7556

Description

LimeSurvey 2.6.x before 2.6.7, 2.7x.x before 2.73.1, and 3.x before 3.4.2 mishandles application/controller/InstallerController.php after installation, which allows remote attackers to access the configuration file.

Affected products

4
  • Limesurvey/LimesurveyOSV3 versions
    1.45a, 1.45a_2007-02-24, 1.50_2007-08-06, …+ 2 more
    • (no CPE)range: 1.45a, 1.45a_2007-02-24, 1.50_2007-08-06, …
    • cpe:2.3:a:limesurvey:limesurvey:*:*:*:*:*:*:*:*range: >=2.6.0,<2.6.7
    • (no CPE)range: <2.6.7, <2.73.1, <3.4.2
  • Debian/linux
    cpe:2.3:o:debian:debian_linux:7.0:*:*:*:*:*:*:*

Patches

Vulnerability mechanics

References

1

News mentions

0

No linked articles in our index yet.

CVE-2018-7556 · Critical · VYPR