← Database

CVE-2008-2571

MEDIUM CVSS: 4.3 Published: 2008-06-06 Modified: 2026-06-16

Description

Cross-site request forgery (CSRF) vulnerability in LimeSurvey (formerly PHPSurveyor) before 1.71 allows remote attackers to change arbitrary quotas as administrators via a "modify quota" action.

Affected Platforms

Limesurvey Limesurvey

Weakness Type

CWE-79

References