eFront 3.6.10 Build 11944 - Multiple Cross-Site Scripting Vulnerabilities

source: https://www.securityfocus.com/bid/50469/info eFront is prone to multiple cross-site scripting vulnerabilities because the software fails to sufficiently sanitize user-supplied input An attacker may leverage these issues to execute arbitrary script code in the browser of an unsuspecting us...

eFront 3.6.10 Multiple Security Vulnerabilities

eFront is prone to multiple security vulnerabilities, including: - A remote code injection vulnerability - Multiple SQL injection vulnerabilities - An authentication bypass and privilege escalation vulnerability - A remote code execution vulnerability - A file upload vulnerability...

eFront 3.6.10 - professor.php Script Multiple SQL Injections

eFront 3.6.10 - professor.php Script Multiple SQL Injections source: https://www.securityfocus.com/bid/50419/info eFront is prone to multiple SQL-injection vulnerabilities because the application fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting these...

eFront Enterprise 3.6.10 Database Disclosure / SQL Injection

Title: ====== eFront Enterprise v3.6.10 - Multiple Remote Vulnerabilities Date: ===== 2011-10-27 References: =========== http://www.vulnerability-lab.com/getcontent.php?id=298 VL-ID: ===== 298 Introduction: ============= Tailored with larger organizations in mind, eFront Enterprise offers solutio...

eFront 3.6.10 - 'professor.php' Script Multiple SQL Injections

source: https://www.securityfocus.com/bid/50419/info eFront is prone to multiple SQL-injection vulnerabilities because the application fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting these issues could allow an attacker to compromise the application,...

eFront 3.6.10 Build 11944 Shell Upload / Code Execution / SQL Injection

---------------------------------------------------------------- eFront = 3.6.10 build 11944 Multiple Security Vulnerabilities ---------------------------------------------------------------- author.............: EgiX mail...............: n0b0d13satgmaildotcom software link......:...

eFront 3.6.10 (build 11944) - Multiple Vulnerabilities

eFront 3.6.10 build 11944 - Multiple Vulnerabilities ---------------------------------------------------------------- eFront = 3.6.10 build 11944 Multiple Security Vulnerabilities ---------------------------------------------------------------- author.............: EgiX mail...............:...

eFront 3.6.10 (build 11944) - Multiple Vulnerabilities

---------------------------------------------------------------- eFront = 3.6.10 build 11944 Multiple Security Vulnerabilities ---------------------------------------------------------------- author.............: EgiX mail...............: n0b0d13satgmaildotcom software link......:...

eFront <= 3.6.10 (build 11944) Multiple Security Vulnerabilities

Exploit for php platform in category web applications ---------------------------------------------------------------- eFront = 3.6.10 build 11944 Multiple Security Vulnerabilities ---------------------------------------------------------------- author.............: EgiX mail...............:...

eFront Enterprise v3.6.10 - Multiple Remote Vulnerabilities

Document Title: =============== eFront Enterprise v3.6.10 - Multiple Remote Vulnerabilities References Source: ==================== VL-ID http://www.vulnerability-lab.com/getcontent.php?id=298 CNNVD-201110-705 http://www.cnnvd.org.cn/vulnerability/show/cvcnnvdid/CNNVD-201110-705 Release Date:...

eFront Enterprise v3.6.10 - Multiple Remote Vulnerabilities

Document Title: =============== eFront Enterprise v3.6.10 - Multiple Remote Vulnerabilities References Source: ==================== VL-ID http://www.vulnerability-lab.com/getcontent.php?id=298 CNNVD-201110-705 http://www.cnnvd.org.cn/vulnerability/show/cvcnnvdid/CNNVD-201110-705 Release Date:...

Multiple vulnerabilities in Efront

High-Tech Bridge SA Security Research Lab has discovered multiple vulnerabilities in Efront, which can be exploited to perform SQL injection and cross-site scripting attacks. 1 Cross-Site scripting XSS vulnerabilities in Efront 1.1 Input passed via the "course" GET parameter to index.php is not...

EFront 3.6.9 Community Edition multiple vulnerabilities-vulnerability warning-the black bar safety net

Exploit Title: EFront = 3.6.9 Community Edition Multiple Vulnerabilities Google Dork: "eFront version 3.6.9" inurl:index. php? ctg= Date: 5/09/2011 Public release: When 3.6.10 will be released Author: IHTeam Software Link:http://www.efrontlearning.net/download/download-efront.html Tested on:...

eFront Enterprise 3.6.9 Arbitrary File Download

Title: ====== eFront Enterprise v3.6.9 - Arbitrary Download Vulnerability Date: ===== 2011-10-08 References: =========== http://www.vulnerability-lab.com/getcontent.php?id=290 http://www.vulnerability-lab.com/getcontent.php?id=230 VL-ID: ===== 290 Introduction: ============= Tailored with larger...

eFront Enterprise Edition 3.6.9 SQL Injection

Title: ====== eFront Enterprise Edition v3.6.9 - SQL Injection Vulnerability Date: ===== 2011-10-07 References: =========== http://www.vulnerability-lab.com/getcontent.php?id=230 VL-ID: ===== 230 Introduction: ============= Tailored with larger organizations in mind, eFront Enterprise offers...

eFront Enterprise v3.6.9 - Arbitrary Download Vulnerability

Document Title: =============== eFront Enterprise v3.6.9 - Arbitrary Download Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=290 http://www.vulnerability-lab.com/getcontent.php?id=230 Release Date: ============= 2011-10-07 Vulnerability...

eFront Enterprise v3.6.9 - Arbitrary Download Vulnerability

Document Title: =============== eFront Enterprise v3.6.9 - Arbitrary Download Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=290 http://www.vulnerability-lab.com/getcontent.php?id=230 Release Date: ============= 2011-10-07 Vulnerability...

eFront 3.6.9 SQL Injection / Authentication Bypass

Exploit Title: EFront UNION ALL SELECT 1,2,3,password,5,6,login,8,9,10,11,12 FROM users -- www/professor.php?ctg=messages&folder= UNION ALL SELECT 1,2,3,password,5,6,login,8,9,10,11,12 FROM users -- www/admin.php?ctg=messages&folder= UNION ALL SELECT 1,2,3,password,5,6,login,8,9,10,11,12 FROM use...

EFront 3.6.9 Community Edition - Multiple Vulnerabilities

EFront 3.6.9 Community Edition - Multiple Vulnerabilities Exploit Title: EFront UNION ALL SELECT 1,2,3,password,5,6,login,8,9,10,11,12 FROM users -- www/professor.php?ctg=messages&folder= UNION ALL SELECT 1,2,3,password,5,6,login,8,9,10,11,12 FROM users -- www/admin.php?ctg=messages&folder= UNION...

EFront 3.6.9 Community Edition - Multiple Vulnerabilities

Exploit Title: EFront UNION ALL SELECT 1,2,3,password,5,6,login,8,9,10,11,12 FROM users -- www/professor.php?ctg=messages&folder= UNION ALL SELECT 1,2,3,password,5,6,login,8,9,10,11,12 FROM users -- www/admin.php?ctg=messages&folder= UNION ALL SELECT 1,2,3,password,5,6,login,8,9,10,11,12 FROM use...