eFronts Community++ 3.6.10 Cross Site Scripting

Title: ====== eFronts Community++ v3.6.10 - Cross Site Vulnerability Date: ===== 2012-02-07 References: =========== http://www.vulnerability-lab.com/getcontent.php?id=423 VL-ID: ===== 423 Introduction: ============= Tailored with larger organizations in mind, eFront Community ++ offers solutions...

eFront 3.6.10 - administrator.php Cross-Site Scripting

eFront 3.6.10 - administrator.php Cross-Site Scripting source: https://www.securityfocus.com/bid/51894/info eFront is prone to a cross-site scripting vulnerability because it fails to sufficiently sanitize user-supplied data. An attacker may leverage this issue to execute arbitrary script code in...

eFront Community++ v3.6.10 - Cross Site Vulnerability

Document Title: =============== eFront Community++ v3.6.10 - Cross Site Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=423 Release Date: ============= 2012-02-07 Vulnerability Laboratory ID VL-ID: ==================================== 423...

eFront 3.6.10 - 'administrator.php' Cross-Site Scripting

source: https://www.securityfocus.com/bid/51894/info eFront is prone to a cross-site scripting vulnerability because it fails to sufficiently sanitize user-supplied data. An attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspecting user in the context of...

eFront Community++ v3.6.10 - Cross Site Vulnerability

Document Title: =============== eFront Community++ v3.6.10 - Cross Site Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=423 Release Date: ============= 2012-02-07 Vulnerability Laboratory ID VL-ID: ==================================== 423...

eFront Enterprise 3.6.10 Directory Traversal

Title: ====== eFront Enterprise v3.6.10 - File Include Vulnerability Date: ===== 2012-01-06 References: =========== http://www.vulnerability-lab.com/getcontent.php?id=296 VL-ID: ===== 296 Introduction: ============= Tailored with larger organizations in mind, eFront Enterprise offers solutions fo...

eFront Enterprise v3.6.10 - File Include Vulnerability

Document Title: =============== eFront Enterprise v3.6.10 - File Include Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=296 Release Date: ============= 2012-01-06 Vulnerability Laboratory ID VL-ID: ==================================== 296...

eFront 3.6.10 - download Directory Traversal

eFront 3.6.10 - download Directory Traversal source: https://www.securityfocus.com/bid/51302/info eFront is prone to a directory-traversal vulnerability because it fails to sufficiently sanitize user-supplied input data. Successfully exploiting the issue may allow an attacker to obtain sensitive...

eFront Enterprise v3.6.10 - File Include Vulnerability

Document Title: =============== eFront Enterprise v3.6.10 - File Include Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=296 Release Date: ============= 2012-01-06 Vulnerability Laboratory ID VL-ID: ==================================== 296...

eFront 3.6.10 - 'download' Directory Traversal

source: https://www.securityfocus.com/bid/51302/info eFront is prone to a directory-traversal vulnerability because it fails to sufficiently sanitize user-supplied input data. Successfully exploiting the issue may allow an attacker to obtain sensitive information that could aid in further attacks...

eFront <= 3.6.10 (build 11944) Multiple Security Vulnerabilities

---------------------------------------------------------------- eFront = 3.6.10 build 11944 Multiple Security Vulnerabilities ---------------------------------------------------------------- author.............: EgiX mail...............: n0b0d13satgmaildotcom software link......:...

Multiple vulnerabilities in Efront

Vulnerability ID: HTB23053 Reference: https://www.htbridge.ch/advisory/multiplevulnerabilitiesinefront.html Product: Efront Vendor: EPIGNOSIS Ltd http://www.efrontlearning.net/ Vulnerable Version: 3.6.10 build 11944 and probably prior Tested Version: 3.6.10 build 11944 Vendor Notification: 12...

XSS Vulnerabilities in eFront

Information --------------------------------- Name : XSS Vulnerabilities in eFront Software : eFront 3.6.10 build 11944 and possibly below. Vendor Homepage : http://efrontlearning.net/ Vulnerability Type : Cross-Site Scripting Severity : High Researcher : Canberk Bolat Advisory Reference :...

eFront <= 3.6.10 build 11944 Multiple XSS and SQLi Vulnerabilities

eFront is prone to multiple cross-site scripting XSS and SQL injection SQLi vulnerabilities because the software fails to sufficiently sanitize user-supplied input. SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C b...

eFront 3.6.x - Multiple Cross-Site Scripting / SQL Injections

source: https://www.securityfocus.com/bid/50492/info eFront is prone to multiple cross-site scripting and SQL-injection vulnerabilities because the software fails to sufficiently sanitize user-supplied input. Exploiting these vulnerabilities could allow an attacker to steal cookie-based...

eFront 3.6.x - Multiple Cross-Site Scripting SQL Injections

eFront 3.6.x - Multiple Cross-Site Scripting SQL Injections source: https://www.securityfocus.com/bid/50492/info eFront is prone to multiple cross-site scripting and SQL-injection vulnerabilities because the software fails to sufficiently sanitize user-supplied input. Exploiting these...

eFront 3.6.10 Build 11944 Cross Site Scripting

Information --------------------------------- Name : XSS Vulnerabilities in eFront Software : eFront 3.6.10 build 11944 and possibly below. Vendor Homepage : http://efrontlearning.net/ Vulnerability Type : Cross-Site Scripting Severity : High Researcher : Canberk Bolat Advisory Reference :...

Efront 3.6.10 Build 11944 Cross Site Scripting / SQL Injection

Vulnerability ID: HTB23053 Reference: https://www.htbridge.ch/advisory/multiplevulnerabilitiesinefront.html Product: Efront Vendor: EPIGNOSIS Ltd http://www.efrontlearning.net/ Vulnerable Version: 3.6.10 build 11944 and probably prior Tested Version: 3.6.10 build 11944 Vendor Notification: 12...

eFront <= 3.6.10 build 11944 Multiple XSS Vulnerabilities

eFront is prone to multiple cross-site scripting XSS vulnerabilities because the software fails to sufficiently sanitize user-supplied input. SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right...

eFront 3.6.10 Build 11944 - Multiple Cross-Site Scripting Vulnerabilities

eFront 3.6.10 Build 11944 - Multiple Cross-Site Scripting Vulnerabilities source: https://www.securityfocus.com/bid/50469/info eFront is prone to multiple cross-site scripting vulnerabilities because the software fails to sufficiently sanitize user-supplied input An attacker may leverage these...