Vulnerabilities (CVE)

Filtered by vendor Opensurveypilot Subscribe
Total 1 CVE
CVE Vendors Products Updated CVSS v2 CVSS v3
CVE-2007-2166 1 Opensurveypilot 1 Opensurveypilot 2024-02-04 6.8 MEDIUM N/A
PHP remote file inclusion vulnerability in administration/user/lib/group.inc.php in OpenSurveyPilot (osp) 1.2.1 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the cfgPathToProjectAdmin parameter.