CVE-2015-4463

2017-07-2518:00:00

mitre

www.cve.org

6.1 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

38.9%

JSON

The file_manager component in eFront CMS before 3.6.15.5 allows remote authenticated users to bypass intended file-upload restrictions by appending a crafted parameter to the file URL.

References

forum.efrontlearning.net/viewtopic.php?f=15&t=9841

mohankallepalli.blogspot.in/2015/05/eFront-cms-multiple-bugs.html