CVE-2019-9960
CRITICAL
9.8
CVSS Severity Score
Vulnerability Description
The downloadZip function in application/controllers/admin/export.php in LimeSurvey through 3.16.1+190225 allows a relative path.
Affected Platforms (CPE)
📦
Limesurvey
Back to CVE Browser
Related Vulnerabilities
CVE-2020-114559.8
LimeSurvey before 4.1.12+200324 contains a path traversal vulnerability in application/controllers/admin/LimeSurveyFileManager.php...
CVE-2019-250199.8
LimeSurvey before 4.0.0-RC4 allows SQL injection via the participant model.
CVE-2019-161849.8
A CSV injection vulnerability was found in Limesurvey before 3.17.14 that allows survey participants to inject commands via their ...
CVE-2008-25709.3
Multiple unspecified vulnerabilities in LimeSurvey (formerly PHPSurveyor) before 1.71 have unknown impact and attack vectors.