CVE-2025-41375 | Teknoloji dünyasından en güncel haberleri ve güvenlikle ilgili gelişmeleri takip edin.

SQL Injection vulnerability in Limesurvey v2.65.1+170522. This vulnerability allows an attacker to retrieve, create, update and delete database via 'token' para…
Critical CVSS: 9.3

CVE-2025-41375

SQL Injection vulnerability in Limesurvey v2.65.1+170522. This vulnerability allows an attacker to retrieve, create, update and delete database via 'token' parameter in '/index.php' endpoint.
Vendor
Limesurvey
Product
Limesurvey
CWE
CWE-89
Yayın Tarihi
2025-08-01 13:15:27
Güncelleme
2026-01-30 21:45:13
Source Identifier
cve-coordination@incibe.es
KEV Date Added
-

Kategoriler

CWE-89 Limesurvey CRITICAL Limesurvey 2025

Referanslar

https://www.incibe.es/en/incibe-cert/notices/aviso/multiple-vulnerabilities-limesurvey