Back to CVE Browser

CVE-2008-2570

CRITICAL

9.3

CVSS Severity Score

EPSS Score0.1050%

EPSS Percentile11.34th

PublishedJun 6, 2008

Last ModifiedApr 23, 2026

Vulnerability Description

Multiple unspecified vulnerabilities in LimeSurvey (formerly PHPSurveyor) before 1.71 have unknown impact and attack vectors.

Affected Platforms (CPE)

📦

Limesurvey

Limesurvey

<= 1.70

References & Advisories

🔗 http://secunia.com/advisories/30495

🔗 http://sourceforge.net/project/shownotes.php?group_id=74605&release_id=603922

🔗 http://www.limesurvey.org/content/view/102/1/lang%2Cen/

🔗 http://www.securityfocus.com/bid/29506

🔗 https://exchange.xforce.ibmcloud.com/vulnerabilities/42806

🔗 http://secunia.com/advisories/30495

🔗 http://sourceforge.net/project/shownotes.php?group_id=74605&release_id=603922

🔗 http://www.limesurvey.org/content/view/102/1/lang%2Cen/

Related Vulnerabilities

CVE-2019-250199.8

LimeSurvey before 4.0.0-RC4 allows SQL injection via the participant model.

CVE-2019-99609.8

The downloadZip function in application/controllers/admin/export.php in LimeSurvey through 3.16.1+190225 allows a relative path.

CVE-2019-161849.8

A CSV injection vulnerability was found in Limesurvey before 3.17.14 that allows survey participants to inject commands via their ...

CVE-2020-114559.8

LimeSurvey before 4.1.12+200324 contains a path traversal vulnerability in application/controllers/admin/LimeSurveyFileManager.php...