Get a demo
Web Application Vulnerabilities Runtime SCA Findings
Looking for the vulnerability index of Invicti's legacy products?
Invicti Enterprise Acunetix Standard & Premium
LimeSurvey Improper Input Validation Vulnerability - CVE-2019-15640 - Vulnerability Database
LimeSurvey

LimeSurvey Improper Input Validation Vulnerability - CVE-2019-15640

High
Reference: CVE-2019-15640
NVD Link: https://nvd.nist.gov/vuln/detail/CVE-2019-15640
Title: LimeSurvey Improper Input Validation Vulnerability
Overview:

Limesurvey before 3.17.10 does not validate both the MIME type and file extension of an image.