CVE-2018-1000659

LimeSurvey version 3.14.4 and earlier contains a directory traversal in file upload that allows upload of webshell vulnerability in file upload functionality that can result in remote code execution as authenticated user. This attack appear to be exploitable via An authenticated user can upload a specially crafted zip file to get remote code execution. This vulnerability appears to have been fixed in after commit 72a02ebaaf95a80e26127ee7ee2b123cccce05a7 / version 3.14.4.

• CWE-22

• https://github.com/LimeSurvey/LimeSurvey/commit/72a02ebaaf95a80e26127ee7ee2b123cccce05a7Patch, Third Party Advisory
• https://github.com/LimeSurvey/LimeSurvey/commit/72a02ebaaf95a80e26127ee7ee2b123cccce05a7Patch, Third Party Advisory

Published

Sep 6, 2018

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2018-1000653zzcms version 8.3 and earlier contains a SQL Injection vulne…
• CVE-2018-1000654GNU Libtasn1-4.13 libtasn1-4.13 version libtasn1-4.13, libta…
• CVE-2018-1000655Jsish version 2.4.65 contains a CWE-476: NULL Pointer Derefe…
• CVE-2018-1000656The Pallets Project flask version Before 0.12.3 contains a C…
• CVE-2018-1000657Rust Programming Language Rust standard library version Comm…
• CVE-2018-1000658LimeSurvey version prior to 3.14.4 contains a file upload vu…
• CVE-2018-1000660TOCK version prior to commit 42f7f36e74088036068d62253e1d8fb…
• CVE-2018-1000661jsish version 2.4.67 contains a CWE-476: NULL Pointer Derefe…
• CVE-2018-1000662Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultI…
• CVE-2018-1000663jsish version 2.4.70 2.047 contains a Buffer Overflow vulner…
• CVE-2018-1000664daneren2005 DSub for Subsonic (Android client) version 5.4.1…
• CVE-2018-1000665Dojo Dojo Objective Harness (DOH) version prior to version 1…