CVE-2025-41375

SQL Injection in Limesurvey

Summary

Original description

The description as published by the source.

SQL Injection vulnerability in Limesurvey v2.65.1+170522. This vulnerability allows an attacker to retrieve, create, update and delete database via 'token' parameter in '/index.php' endpoint.

Source: OSV.dev (Open Source Vulnerabilities) NVD OSV

References

advisory github.com
advisory nvd.nist.gov
web incibe.es

Metadata

CVE: CVE-2025-41375
Published: 2025-08-01
First seen on SecPulse: 1 year ago
First-seen source: OSV.dev (Open Source Vulnerabilities)

CWE

CWE-89

Detection sources

OSV.dev (Open Source Vulnerabilities) 2 months ago