# LimeSurvey Pentesting

LimeSurvey is a statistical servey web app written in PHP based on MySQL, SQLite, PostgreSQL or MSSQL database.

### Default Credentials <a href="#default-credentials" id="default-credentials"></a>

```shellscript
admin:password
```

### Remote Code Execution (RCE) version < 3.16 <a href="#remote-code-execution-rce-version-316" id="remote-code-execution-rce-version-316"></a>

Reference: <https://www.exploit-db.com/exploits/46634>