CVE-2015-5078: Limesurvey

Medium severity, CVSS 6.5. EPSS: 1.6% chance of exploitation in the next 30 days.

SQL injection vulnerability in the insert function in application/controllers/admin/dataentry.php in LimeSurvey 2.06+ allows remote authenticated users to execute arbitrary SQL commands via the closedate parameter.

Affected products

• Limesurvey Limesurvey: version 2.06+ only

Published 2015-06-28. Last modified 2026-06-17.