In LimeSurvey version 6.13.0, an external user can trigger a 500 error by sending a malformed session cookie. This error response exposes sensitive internal backend information, including framework details, database engine, table names, primary keys, and content fragments. Such information disclosure can aid attackers in understanding the internal architecture of the application.