UpHeron
All vulnerabilities

Servers and applications

CVE-2024-6933

A flaw has been found in LimeSurvey 6.5.14-240624. Affected by this issue is the function actionUpdateSurveyLocaleSettingsGeneralSettings of the file /index.php?r=admin/database/index/updatesurveylocalesettings_generalsettings of the component Survey General Settings Handler. This manipulation of the argument Language causes sql injection. The attack is possible to be carried out remotely. The…

Severity
Low 2.1
Published
21 Jul 2024
Last changed
17 Jun 2026
Added to UpHeron
1 Nov 2026
Fixed in
6.6.2
Sources
NVD

Affected software

SoftwareAffected versions
LimeSurveyServers and applications · cpe:a:limesurvey:limesurvey
  • From 6.5.14 before 6.6.2

References

  • NVD https://nvd.nist.gov/vuln/detail/CVE-2024-6933
  • CVE.org https://www.cve.org/CVERecord?id=CVE-2024-6933