CVE-2008-2571

Severity: medium (CVSS 4.3 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 1.1% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2008-06-06 · updated 2026-06-16
Weakness: CWE-79

Description

Cross-site request forgery (CSRF) vulnerability in LimeSurvey (formerly PHPSurveyor) before 1.71 allows remote attackers to change arbitrary quotas as administrators via a "modify quota" action.

Affected products

LimeSurvey: through 1.70; 1.49, 1.52

References

http://secunia.com/advisories/30495
http://sourceforge.net/project/shownotes.php?group_id=74605&release_id=603922
http://www.limesurvey.org/content/view/102/1/lang%2Cen/
http://www.securityfocus.com/bid/29506
https://exchange.xforce.ibmcloud.com/vulnerabilities/42807
http://secunia.com/advisories/30495
http://sourceforge.net/project/shownotes.php?group_id=74605&release_id=603922
http://www.limesurvey.org/content/view/102/1/lang%2Cen/
http://www.securityfocus.com/bid/29506
https://exchange.xforce.ibmcloud.com/vulnerabilities/42807

Get alerted when CVE-2008-2571 or the next vulnerability affects your stack