Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
Lime Survey <= 6.5.12 is vulnerable to Cross Site Request Forgery (CSRF). The YII_CSRF_TOKEN is only checked when passed in the body of POST requests, but the same check isn't performed in the equivalent GET requests.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
LimeSurvey 安全漏洞
Vulnerability Description
LimeSurvey（前称PHPSurveyor）是LimeSurvey团队的一套开源的在线问卷调查程序，它支持调查程序开发、调查问卷发布以及数据收集等功能。 LimeSurvey 6.5.12及之前版本存在安全漏洞，该漏洞源于容易受到跨站请求伪造(CSRF)攻击。
CVSS Information
N/A
Vulnerability Type
N/A