İçeriğe atla
Noroxi

efrontlearning kayıtları

efrontlearning üreticisine ait 13 yayımlanmış kayıt.

Araştırmacı profili

KEV’e giren
0 · %0
Silahlaştırılmış
0 · %0
Pre-auth RCE
4
Düzeltme kaydı olan
%0
Yayından KEV’e ortanca
KEV’e giren kayıt yok

Yıllara göre kayıt

  1. 17
  2. 18

Çubuk: toplam · koyu kısım: CISA KEV.

Tekrar eden sınıflar

Bu üreticide en sık görülen zafiyet sınıfları: nereye bakmalı.

CWE

Saldırı profili

Tüm kayıtlar

13 kayıt
  • CVE-2010-1918
    30İzleyin

    SQL injection vulnerability in ask_chat.php in eFront 3.6.2 and earlier allows remote attackers to execute arbitrary SQL commands via the ch

    YüksekCVSS 7,5Kavram kanıtıEPSS %1

    efrontlearning · efront12 May 2010

  • CVE-2010-1003
    29İzleyin

    Directory traversal vulnerability in www/editor/tiny_mce/langs/language.php in eFront 3.5.x through 3.5.5 allows remote attackers to include

    OrtaCVSS 6,8Kavram kanıtıEPSS %5

    efrontlearning · efront19 Mar 2010

  • CVE-2008-7026
    28İzleyin

    Unrestricted file upload vulnerability in filesystem3.class.php in eFront 3.5.1 build 2710 and earlier allows remote attackers to execute ar

    OrtaCVSS 6,8Kavram kanıtıEPSS %5

    efrontlearning · efront21 Ağu 2009

  • CVE-2009-3660
    28İzleyin

    PHP remote file inclusion vulnerability in libraries/database.php in Efront 3.5.4 and earlier, when register_globals is enabled, allows remo

    OrtaCVSS 6,8Kavram kanıtıEPSS %2

    efrontlearning · efront11 Eki 2009

  • CVE-2015-4461
    26İzleyin

    Absolute path traversal vulnerability in eFront CMS 3.6.15.4 and earlier allows remote Professor users to obtain sensitive information via a

    OrtaCVSS 6,5İstismar yokEPSS %1

    efrontlearning · efront5 Şub 2018

  • CVE-2015-4463
    26İzleyin

    The file_manager component in eFront CMS before 3.6.15.5 allows remote authenticated users to bypass intended file-upload restrictions by ap

    OrtaCVSS 6,5İstismar yokEPSS %1

    efrontlearning · efront25 Tem 2017

  • CVE-2015-4462
    26İzleyin

    Absolute path traversal vulnerability in the file_manager component of eFront CMS before 3.6.15.5 allows remote authenticated users to read

    OrtaCVSS 6,5İstismar yokEPSS %1

    efrontlearning · efront25 Tem 2017

  • CVE-2012-4269
    25İzleyin

    Unrestricted file upload vulnerability in eFront 3.6.11 allows remote authenticated users to execute arbitrary code by uploading a file with

    OrtaCVSS 6,0İstismar yokEPSS %2

    efrontlearning · efront13 Ağu 2012

  • CVE-2012-6515
    20İzleyin

    eFront 3.6.10, 3.6.11 build 15059, and earlier allows remote attackers to obtain sensitive information via invalid courses_ID parameter in t

    OrtaCVSS 5,0İstismar yokEPSS %1

    efrontlearning · efront23 Oca 2013

  • CVE-2014-4033
    18İzleyin

    Cross-site scripting (XSS) vulnerability in libraries/includes/personal/profile.php in Epignosis eFront 3.6.14.4 allows remote attackers to

    OrtaCVSS 4,3Kavram kanıtıEPSS %3

    efrontlearning · efront11 Haz 2014

  • CVE-2012-1048
    17İzleyin

    Cross-site scripting (XSS) vulnerability in communityplusplus/www/administrator.php in eFront Community++ edition 3.6.10, and possibly other

    OrtaCVSS 4,3Kavram kanıtıEPSS %1

    efrontlearning · efront community \+\+12 Şub 2012

  • CVE-2013-7194
    15İzleyin

    Multiple cross-site scripting (XSS) vulnerabilities in www/administrator.php in eFront 3.6.14 (build 18012) allow remote authenticated admin

    DüşükCVSS 3,5Kavram kanıtıEPSS %3

    efrontlearning · efront20 Ara 2013

  • CVE-2012-4270
    14İzleyin

    Cross-site scripting (XSS) vulnerability in eFront 3.6.11 allows remote authenticated users to inject arbitrary web script or HTML via the s

    DüşükCVSS 3,5İstismar yokEPSS %1

    efrontlearning · efront13 Ağu 2012