Vulnerability index

Browse CVEs

9 matching
Filters 1 Clear all
Severity

Filters apply as you choose them.

Efront MEDIUM 6.5
CVE-2015-4461

Absolute path traversal vulnerability in eFront CMS 3.6.15.4 and earlier allows remote Professor users to obtain sensitive information via a full pat…

Fix: after 3.6.15.4
Fix from $1,600 2018-02-05
Efront MEDIUM 6.5
CVE-2015-4462

Absolute path traversal vulnerability in the file_manager component of eFront CMS before 3.6.15.5 allows remote authenticated users to read arbitrary…

Fix: after 3.6.15.4
Fix from $1,600 2017-07-25
Efront MEDIUM 6.5
CVE-2015-4463

The file_manager component in eFront CMS before 3.6.15.5 allows remote authenticated users to bypass intended file-upload restrictions by appending a…

Fix: after 3.6.15.4
Fix from $1,600 2017-07-25
Efront MEDIUM 5.0
CVE-2012-6515

eFront 3.6.10, 3.6.11 build 15059, and earlier allows remote attackers to obtain sensitive information via invalid courses_ID parameter in the lesson…

No fix yet
Fix from $1,600 2013-01-24
Efront MEDIUM 6.0
CVE-2012-4269

Unrestricted file upload vulnerability in eFront 3.6.11 allows remote authenticated users to execute arbitrary code by uploading a file with an execu…

No fix yet
Fix from $1,600 2012-08-13
Efront HIGH 7.5
CVE-2010-1918

SQL injection vulnerability in ask_chat.php in eFront 3.6.2 and earlier allows remote attackers to execute arbitrary SQL commands via the chatrooms_I…

Fix: after 3.6.2
Fix from $1,950 2010-05-12
Efront MEDIUM 6.8
CVE-2010-1003EPSS 5%

Directory traversal vulnerability in www/editor/tiny_mce/langs/language.php in eFront 3.5.x through 3.5.5 allows remote attackers to include and exec…

Patch available
Fix from $1,600 2010-03-19
Efront MEDIUM 6.8
CVE-2009-3660

PHP remote file inclusion vulnerability in libraries/database.php in Efront 3.5.4 and earlier, when register_globals is enabled, allows remote attack…

Fix: after 3.5.4
Fix from $1,600 2009-10-11
Efront MEDIUM 6.8
CVE-2008-7026

Unrestricted file upload vulnerability in filesystem3.class.php in eFront 3.5.1 build 2710 and earlier allows remote attackers to execute arbitrary c…

Fix: after 3.5.1
Fix from $1,600 2009-08-21