Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
2 selected

3 records

Vendor: Surveys Project Component: Surveys Clear all filters
TI-2017-14747 CVE-2017-1002022 · GHSA-rpgh-6987-wrgc

SQL injection in Binny V A surveys

Priority MEDIUM 48

Vulnerability in wordpress plugin surveys v1.01.8, The code in questions.php does not sanitize the survey variable before placing it inside of an SQL query.

CVSS 3.0CRITICAL 9.8 Network No auth No interaction EPSS 0.03628 Published 2017-09-14 Fixed in 1.01.8 CWE-89
TI-2017-14746 CVE-2017-1002021 · GHSA-q72m-wx74-836p

SQL injection in Binny V A surveys

Priority MEDIUM 48

Vulnerability in wordpress plugin surveys v1.01.8, The code in individual_responses.php does not sanitize the survey_id variable before placing it inside of an SQL query.

CVSS 3.0CRITICAL 9.8 Network No auth No interaction EPSS 0.03628 Published 2017-09-14 Fixed in 1.01.8 CWE-89
TI-2017-14745 CVE-2017-1002020 · GHSA-v23h-c63q-cfvq

SQL injection in Binny V A surveys

Priority MEDIUM 48

Vulnerability in wordpress plugin surveys v1.01.8, The code in survey_form.php does not sanitize the action variable before placing it inside of an SQL query.

CVSS 3.0CRITICAL 9.8 Network No auth No interaction EPSS 0.03628 Published 2017-09-14 Fixed in 1.01.8 CWE-89