Read the docs
TI-2012-04220 Aliases CVE-2012-4994GHSA-wpgc-hc8c-3fvw

SQL injection vulnerability in admin/admin.php in LimeSurvey before 1.91+ Build 120224…

Priority LOW 31CWE-89Published · Updated

Key facts

Attack vector
Network
Privileges required
Low
User interaction
— Not recorded in CVSS 2.0
Attack complexity
Low
Impact type
SQL injection
Confidentiality · integrity · availability
Partial · Partial · Partial
Fix status
No fix listed

Attack profile from CVSS 2.0 · NVD. Fix status from CNA. Impact type from CWE-89.

Summary

SQL injection vulnerability in admin/admin.php in LimeSurvey before 1.91+ Build 120224 allows remote authenticated users to execute arbitrary SQL commands via the id parameter in a browse action. NOTE: some of these details are obtained from third party information.

Why it matters now

EPSS 0.01041 64th percentileScored 2026-11-07
Fix No fix listed No fixed version in the sources yet

SSVC decision points

Not available: CISA has not published SSVC decision points for this record.

Affected products

VendorProductAffected versionsFixed inStatusSource
——all versions—No fix listedCNA
  • — Vendor— Affected all versions Fixed in — No fix listed CNA

CPE configurations NVD · 15

CPEVersionsRoleVendor
cpe:2.3:a:limesurvey:limesurvey:*:*:*:*:*:*:*:*up to 1.91\+VulnerableLimeSurvey
cpe:2.3:a:limesurvey:limesurvey:1.01:*:*:*:*:*:*:*1.01VulnerableLimeSurvey
cpe:2.3:a:limesurvey:limesurvey:1.50:*:*:*:*:*:*:*1.50VulnerableLimeSurvey
cpe:2.3:a:limesurvey:limesurvey:1.52:*:*:*:*:*:*:*1.52VulnerableLimeSurvey
cpe:2.3:a:limesurvey:limesurvey:1.53\+:*:*:*:*:*:*:*1.53+VulnerableLimeSurvey
cpe:2.3:a:limesurvey:limesurvey:1.70\+:*:*:*:*:*:*:*1.70+VulnerableLimeSurvey
cpe:2.3:a:limesurvey:limesurvey:1.71\+:*:*:*:*:*:*:*1.71+VulnerableLimeSurvey
cpe:2.3:a:limesurvey:limesurvey:1.72:*:*:*:*:*:*:*1.72VulnerableLimeSurvey
cpe:2.3:a:limesurvey:limesurvey:1.80\+:*:*:*:*:*:*:*1.80+VulnerableLimeSurvey
cpe:2.3:a:limesurvey:limesurvey:1.81\+:*:*:*:*:*:*:*1.81+VulnerableLimeSurvey
  • cpe:2.3:a:limesurvey:limesurvey:*:*:*:*:*:*:*:* Versions up to 1.91\+ Vulnerable ·LimeSurvey
  • cpe:2.3:a:limesurvey:limesurvey:1.01:*:*:*:*:*:*:* Versions 1.01 Vulnerable ·LimeSurvey
  • cpe:2.3:a:limesurvey:limesurvey:1.50:*:*:*:*:*:*:* Versions 1.50 Vulnerable ·LimeSurvey
  • cpe:2.3:a:limesurvey:limesurvey:1.52:*:*:*:*:*:*:* Versions 1.52 Vulnerable ·LimeSurvey
  • cpe:2.3:a:limesurvey:limesurvey:1.53\+:*:*:*:*:*:*:* Versions 1.53+ Vulnerable ·LimeSurvey
  • cpe:2.3:a:limesurvey:limesurvey:1.70\+:*:*:*:*:*:*:* Versions 1.70+ Vulnerable ·LimeSurvey
  • cpe:2.3:a:limesurvey:limesurvey:1.71\+:*:*:*:*:*:*:* Versions 1.71+ Vulnerable ·LimeSurvey
  • cpe:2.3:a:limesurvey:limesurvey:1.72:*:*:*:*:*:*:* Versions 1.72 Vulnerable ·LimeSurvey
  • cpe:2.3:a:limesurvey:limesurvey:1.80\+:*:*:*:*:*:*:* Versions 1.80+ Vulnerable ·LimeSurvey
  • cpe:2.3:a:limesurvey:limesurvey:1.81\+:*:*:*:*:*:*:* Versions 1.81+ Vulnerable ·LimeSurvey
Show 5 more CPE
CPEVersionsRoleVendor
cpe:2.3:a:limesurvey:limesurvey:1.82\+:*:*:*:*:*:*:*1.82+VulnerableLimeSurvey
cpe:2.3:a:limesurvey:limesurvey:1.85:*:*:*:*:*:*:*1.85VulnerableLimeSurvey
cpe:2.3:a:limesurvey:limesurvey:1.86:*:*:*:*:*:*:*1.86VulnerableLimeSurvey
cpe:2.3:a:limesurvey:limesurvey:1.87\+:*:*:*:*:*:*:*1.87+VulnerableLimeSurvey
cpe:2.3:a:limesurvey:limesurvey:1.90\+:*:*:*:*:*:*:*1.90+VulnerableLimeSurvey
  • cpe:2.3:a:limesurvey:limesurvey:1.82\+:*:*:*:*:*:*:* Versions 1.82+ Vulnerable ·LimeSurvey
  • cpe:2.3:a:limesurvey:limesurvey:1.85:*:*:*:*:*:*:* Versions 1.85 Vulnerable ·LimeSurvey
  • cpe:2.3:a:limesurvey:limesurvey:1.86:*:*:*:*:*:*:* Versions 1.86 Vulnerable ·LimeSurvey
  • cpe:2.3:a:limesurvey:limesurvey:1.87\+:*:*:*:*:*:*:* Versions 1.87+ Vulnerable ·LimeSurvey
  • cpe:2.3:a:limesurvey:limesurvey:1.90\+:*:*:*:*:*:*:* Versions 1.90+ Vulnerable ·LimeSurvey

Remediation

No fixed version listed by the sources yet.

Timeline

  1. 2026-10-02 Threatist record created from CVE-2012-4994
  2. 2026-10-03 Alias added: GHSA-wpgc-hc8c-3fvw

References

Patch 1

Other 2

  • TI-2020-09194 LimeSurvey before 4.1.12+200324 contains a path traversal vulnerability in… CVSS 3.1CRITICAL 9.8
  • TI-2024-28662 An issue in the js_localize.php function of LimeSurvey v6.6.2 and before allows attackers… CVSS 3.1HIGH 8.8
  • TI-2024-26167 Lime Survey <= 6.5.12 is vulnerable to Cross Site Request Forgery (CSRF). CVSS 3.1HIGH 8.8
  • TI-2022-21122 LimeSurvey before v5.0.4 was discovered to contain a SQL injection vulnerability via the… CVSS 3.1HIGH 7.2
  • TI-2007-03523 Multiple PHP remote file inclusion vulnerabilities in LimeSurvey (aka PHPSurveyor)… CVSS 2.0MEDIUM 6.8
  • TI-2018-12189 An issue was discovered in TCPDF before 6.2.22. CVSS 3.0CRITICAL 9.8
See all 81 →

Sources

This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences