ZeroDay Findings
Sign inSign up

Findings

CVE-2025-56421

SQL Injection vulnerability in LimeSurvey before v.6.15.4+250710 allows a remote attacker to obtain sensitive information from the database.

Published Mar 10, 2026 · updated Jul 5, 2026 · limesurvey limesurvey

SQL Injection vulnerability in LimeSurvey before v.6.15.4+250710 allows a remote attacker to obtain sensitive information from the database.

Code

The project this record applies to. Exploit listings stay in References.

Timeline

Detection, updates, and resolution for this record.

  1. Mar 10, 2026 · NIST NVD

    Detected

    SQL Injection vulnerability in LimeSurvey before v.6.15.4+250710 allows a remote attacker to obtain sensitive information from the database.

  2. Jul 5, 2026 · NIST NVD

    Updated

    SQL Injection vulnerability in LimeSurvey before v.6.15.4+250710 allows a remote attacker to obtain sensitive information from the database.

Affected

  • cpe limesurvey/limesurveyversion unspecified

Sources

  • CVE.orgVulnerability recordCVE-2025-56421

    Official CVE identifier

    cve.org
  • NIST NVDVulnerability recordCVE-2025-56421

    SQL Injection vulnerability in LimeSurvey before v.6.15.4+250710 allows a remote attacker to obtain sensitive information from the database.

    nvd.nist.gov

References