CVE-2021-44967

A Remote Code Execution (RCE) vulnerabilty exists in LimeSurvey 5.2.4 via the upload and install plugins function, which could let a remote malicious user upload an arbitrary PHP code file. NOTE: the Supplier's position is that plugins intentionally can contain arbitrary PHP code, and can only be installed by a superadmin, and therefore the security model is not violated by this finding.

• CWE-434

• https://github.com/Y1LD1R1M-1337/Limesurvey-RCEExploit, Third Party Advisory
• https://www.exploit-db.com/exploits/50573Exploit, Third Party Advisory, VDB Entry
• https://www.limesurvey.org/manual/Plugins_-_advanced
• https://github.com/Y1LD1R1M-1337/Limesurvey-RCEExploit, Third Party Advisory
• https://www.exploit-db.com/exploits/50573Exploit, Third Party Advisory, VDB Entry

Published

Feb 24, 2022

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2021-44960In SVGPP SVG++ library 1.3.0, the XMLDocument::getRoot funct…6.5
• CVE-2021-44961A memory leakage flaw exists in the class PerimeterGenerator…5.5
• CVE-2021-44962An out-of-bounds read vulnerability exists in the GCode::ext…5.5
• CVE-2021-44964Use after free in garbage collector and finalizer of lgc.c i…6.3
• CVE-2021-44965Directory traversal vulnerability in /admin/includes/* direc…7.5
• CVE-2021-44966SQL injection bypass authentication vulnerability in PHPGURU…9.8
• CVE-2021-44968A Use after Free vulnerability exists in IOBit Advanced Syst…7.8
• CVE-2021-44969Taocms v3.0.2 was discovered to contain a cross-site scripti…4.8
• CVE-2021-44970MiniCMS v1.11 was discovered to contain a cross-site scripti…5.4
• CVE-2021-44971Multiple Tenda devices are affected by authentication bypass…9.8
• CVE-2021-44974radareorg radare2 version 5.5.2 is vulnerable to NULL Pointe…5.5
• CVE-2021-44975radareorg radare2 5.5.2 is vulnerable to Buffer Overflow via…5.5