261 matches found
eFront Enterprise Edition v3.6.9 - SQL Injection Vulnerability
Document Title: =============== eFront Enterprise Edition v3.6.9 - SQL Injection Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=230 CNNVD-201110-706 http://www.cnnvd.org.cn/vulnerability/show/cvid/2011100706 Release Date: =============...
EFront <= 3.6.9 Community Edition Multiple Vulnerabilities
Exploit for php platform in category web applications Exploit Title: EFront UNION ALL SELECT 1,2,3,password,5,6,login,8,9,10,11,12 FROM users -- www/professor.php?ctg=messages&folder= UNION ALL SELECT 1,2,3,password,5,6,login,8,9,10,11,12 FROM users -- www/admin.php?ctg=messages&folder= UNION ALL...
eFront Enterprise Edition v3.6.9 - SQL Injection Vulnerability
Document Title: =============== eFront Enterprise Edition v3.6.9 - SQL Injection Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=230 CNNVD-201110-706 http://www.cnnvd.org.cn/vulnerability/show/cvid/2011100706 Release Date: =============...
eFront <= 3.6.9 Build 11018 Multiple Vulnerabilities
eFront is prone to cross-site scripting XSS and local file inclusion LFI vulnerabilities. SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...
eFront add administrator CSRF vulnerability-vulnerability warning-the black bar safety net
Vulnerability description: eFront is a tool for small and medium businesses, schools, government provide a PHP content management system, due to design defect, causing the remote to add the management, modification Management, Configuration, etc. multiple cross-site request forgery...
eFront enterprise <= XSRF (Add admin/change admin passwd)
Exploit for php platform in category web applications ================================================================================= . . . . | | ||/ | || | / / \ / /\ | | / | \ \ | |/ | \ / | || | // | / // | \ /\ | /|//|||| |\ | / /|| / Exploit-ID is the Indonesian Exploit Archive Web...
eFront Community++ <= XSRF (Add admin/change admin passwd)
Exploit for php platform in category web applications ================================================================================= . . . . | | ||/ | || | / / \ / /\ | | / | \ \ | |/ | \ / | || | // | / // | \ /\ | /|//|||| |\ | / /|| / Exploit-ID is the Indonesian Exploit Archive Web...
eFront Educational <=XSRF (Add admin/change admin passwd)
Exploit for php platform in category web applications ================================================================================= . . . . | | ||/ | || | / / \ / /\ | | / | \ \ | |/ | \ / | || | // | / // | \ /\ | /|//|||| |\ | / /|| / Exploit-ID is the Indonesian Exploit Archive Web...
eFront js/scripts.php 'load' Parameter Remote File Inclusion
The version of eFront running on the remote web server is affected by a remote file inclusion vulnerability due to improper sanitization of user-supplied input to the 'load' parameter of the js/scripts.php script before using it in a PHP include function call. An attacker can exploit this issue t...
eFront 3.6.9 Build 10653 Local File Inclusion
------------------------------------------------------------------------ Software................eFront 3.6.9 build 10653 Vulnerability...........Local File Inclusion Threat Level............Critical 4/5 Download................http://www.efrontlearning.net/ Discovery Date..........5/12/2011 Test...
eFront 3.6.9 Build 10653 Cross Site Scripting
------------------------------------------------------------------------ Software................eFront 3.6.9 build 10653 Vulnerability...........Reflected Cross-site Scripting Threat Level............Low 1/5 Download................http://www.efrontlearning.net/ Discovery Date..........5/12/2011...
eFront 3.6.9 - submitScore.php Cross-Site Scripting
eFront 3.6.9 - submitScore.php Cross-Site Scripting source: https://www.securityfocus.com/bid/47877/info eFront is prone to a cross-site scripting vulnerability because it fails to sufficiently sanitize user-supplied data. An attacker may leverage this issue to execute arbitrary script code in th...
eFront 3.6.9 - 'scripts.php' Local File Inclusion
source: https://www.securityfocus.com/bid/47870/info eFront is prone to a local file-include vulnerability because it fails to properly sanitize user-supplied input. An attacker can exploit this vulnerability to obtain potentially sensitive information or to execute arbitrary local scripts in the...
eFront 3.6.9 - 'submitScore.php' Cross-Site Scripting
source: https://www.securityfocus.com/bid/47877/info eFront is prone to a cross-site scripting vulnerability because it fails to sufficiently sanitize user-supplied data. An attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspecting user in the context of...
eFront 3.6.9 - scripts.php Local File Inclusion
eFront 3.6.9 - scripts.php Local File Inclusion source: https://www.securityfocus.com/bid/47870/info eFront is prone to a local file-include vulnerability because it fails to properly sanitize user-supplied input. An attacker can exploit this vulnerability to obtain potentially sensitive...
eFront version 3.6.6 Mullti Vulnerability
Exploit for php platform in category web applications ========================================= eFront version 3.6.6 Mullti Vulnerability ========================================= 1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=1 3 3 3 3 7 /' \ /'\ /'\ /\ \ /\ /\ \ 7 1 /,...
Cross-site Request Forgery (CSRF) Vulnerabilities in eFront
High-Tech Bridge SA Security Research Lab has discovered multiple vulnerabilities in eFront which could be exploited to perform cross-site request forgery attacks. 1 Cross-site request forgery CSRF in eFront 1.1 The vulnerability exists due to insufficient validation of the request origin in...
eFront Multiple Parameter Cross Site Scripting Vulnerabilities
eFront Multiple Parameter Cross Site Scripting Vulnerabilities I. BACKGROUND --------------------- "eFront is a fully flexible eLearning system capable of fulfilling a wide range of learning needs. With eFront you will discover new ways to perform training tasks easier and faster, while keeping...
eFront 'ask_chat.php' SQLi Vulnerability
eFront is prone to an SQL injection SQLi vulnerability. SPDX-FileCopyrightText: 2010 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:efrontlearning:efront";...
