Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
LimeSurvey version 3.0.0-beta.3+17110 contains a Cross ite Request Forgery (CSRF) vulnerability in Theme Uninstallation that can result in CSRF causing LimeSurvey admins to delete all their themes, rendering the website unusable. This attack appear to be exploitable via Simple HTML markup can be used to send a GET request to the affected endpoint.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
LimeSurvey Theme Uninstallation 跨站请求伪造漏洞
Vulnerability Description
LimeSurvey（前称PHPSurveyor）是LimeSurvey团队开发的一套开源的在线问卷调查程序，它支持调查程序开发、调查问卷发布以及数据收集等功能。Theme Uninstallatio是其中的一个主题卸载组件。 LimeSurvey 3.0.0-beta.3+17110版本中Theme Uninstallation的存在跨站请求伪造漏洞。远程攻击者可利用该漏洞删除管理员全部的主题，造成网站无法使用。
CVSS Information
N/A
Vulnerability Type
N/A