CVE-2008-2571
Publication date 6 June 2008
Last updated 24 July 2024
Ubuntu priority
Description
Cross-site request forgery (CSRF) vulnerability in LimeSurvey (formerly PHPSurveyor) before 1.71 allows remote attackers to change arbitrary quotas as administrators via a "modify quota" action.