CVE-2019-9960
The downloadZip function in application/controllers/admin/export.php in LimeSurvey through 3.16.1+190225 allows a relative path.
Published: 2019-03-24 · CVSS: Unscored
The downloadZip function in application/controllers/admin/export.php in LimeSurvey through 3.16.1+190225 allows a relative path.
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7