Read the docs

Surveys Project

Records3All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical3CVSS 9.0–10.0
CVSS high0CVSS 7.0–8.9

Exploited now

Surveys Project records in CISA KEV

No Surveys Project vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records
Surveys 3 records MEDIUM

Records

3 records

TI-2017-14747 CVE-2017-1002022 · GHSA-rpgh-6987-wrgc

SQL injection in Binny V A surveys

Priority MEDIUM 48

Vulnerability in wordpress plugin surveys v1.01.8, The code in questions.php does not sanitize the survey variable before placing it inside of an SQL query.

CVSS 3.0CRITICAL 9.8 Network No auth No interaction EPSS 0.03628 Published 2017-09-14 Fixed in 1.01.8 CWE-89
TI-2017-14746 CVE-2017-1002021 · GHSA-q72m-wx74-836p

SQL injection in Binny V A surveys

Priority MEDIUM 48

Vulnerability in wordpress plugin surveys v1.01.8, The code in individual_responses.php does not sanitize the survey_id variable before placing it inside of an SQL query.

CVSS 3.0CRITICAL 9.8 Network No auth No interaction EPSS 0.03628 Published 2017-09-14 Fixed in 1.01.8 CWE-89
TI-2017-14745 CVE-2017-1002020 · GHSA-v23h-c63q-cfvq

SQL injection in Binny V A surveys

Priority MEDIUM 48

Vulnerability in wordpress plugin surveys v1.01.8, The code in survey_form.php does not sanitize the action variable before placing it inside of an SQL query.

CVSS 3.0CRITICAL 9.8 Network No auth No interaction EPSS 0.03628 Published 2017-09-14 Fixed in 1.01.8 CWE-89
Open these records in search →