261 matches found
CVE-2015-1559
Multiple cross-site request forgery CSRF vulnerabilities in administrator.php in Epignosis eFront Open Source Edition before 3.6.15.3 build 18022 allow remote attackers to hijack the authentication of administrators for requests that 1 delete modules via the deletemodule parameter, 2 deactivate...
CVE-2015-1559
CVE-2015-1559 affects Epignosis eFront Open Source Edition up to version 3.6.15.3 build 18022, where multiple CSRF vulnerabilities in administrator.php allow an attacker to hijack administrator sessions and perform actions such as deleting/modifying modules, users, themes, events, language settin...
CVE-2015-1559
Multiple cross-site request forgery CSRF vulnerabilities in administrator.php in Epignosis eFront Open Source Edition before 3.6.15.3 build 18022 allow remote attackers to hijack the authentication of administrators for requests that 1 delete modules via the deletemodule parameter, 2 deactivate...
CVE-2015-1559: Cross-Site Request Forgery (CSRF)
Multiple cross-site request forgery CSRF vulnerabilities in administrator.php in Epignosis eFront Open Source Edition before 3.6.15.3 build 18022 allow remote attackers to hijack the authentication of administrators for requests that 1 delete modules via the deletemodule parameter, 2 deactivate...
Multiple Cross-Site Request Forgery Vulnerabilities in eFront 'administrator.php'
eFront is an online learning system. Multiple cross-site request forgery vulnerabilities exist in eFront 'administrator.php', which can be exploited by attackers to perform certain unauthorized actions...
eFront 3.6.15.2 Cross Site Request Forgery
Advisory: Multiple CSRF vulnerabilities in eFront v. 3.6.15.2 CE Advisory ID: SROEADV-2015-09 Author: Steffen Rösemann Affected Software: eFront v. 3.6.15.2 CE Release-date: 05-Dec-2014, build 18021 Vendor URL: http://www.efrontlearning.net Vendor Status: patched CVE-ID: - Tested with/on: -Browse...
eFront 3.6.14 (build 18012) - Stored XSS in Multiple Parameters
No description provided by source. Exploit-DB Note: Screenshot provided by exploit author. Exploit Title: eFront v3.6.14 build 18012 -Stored XSS in multiple Parameters Author: sajith version: eFront v3.6.14- build 18012 Vendor Homepage: http://www.efrontlearning.net/ vulnerable app...
efront <= 3.5.4 (database.php path) Remote File Inclusion Vulnerability
No description provided by source. efront = 3.5.4 Remote File Include Vulnerability Download Script : http://sourceforge.net/projects/efrontlearning/files/ Author : cr4wl3r Contact : cr4wl3r4tlinuxmaildotorg Location : Gorontalo - INDONESIA file : database.php line 15...
eFront <= 3.5.1 / build 2710 Remote Arbitrary Upload Vulnerability
No description provided by source. -=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=- eFront = 3.5.1 / build 2710: Remote File Inclusion Vulnerability -=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=- $ Program: eFront $ File affected: studentpage.php / professorpag...
eFront <= 3.6.10 (build 11944) Multiple Security Vulnerabilities
No description provided by source. ---------------------------------------------------------------- eFront = 3.6.10 build 11944 Multiple Security Vulnerabilities ---------------------------------------------------------------- author.............: EgiX mail...............: n0b0d13satgmaildotcom...
eFront 3.5.5 'langname' Parameter Local File Include Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/38787/info eFront is prone to a local file-include vulnerability because it fails to properly sanitize user-supplied input. An attacker can exploit this vulnerability to obtain potentially sensitive information and execut...
EFront <= 3.6.9 Community Edition Multiple Vulnerabilities
No description provided by source. Exploit Title: EFront = 3.6.9 Community Edition Multiple Vulnerabilities Google Dork: eFront version 3.6.9 inurl:index.php?ctg= Date: 5/09/2011 Public release: When 3.6.10 will be released Author: IHTeam Software Link:...
eFront 3.6.14.4 (surname param) - Persistent XSS Vulnerability
No description provided by source. ? Exploit Title: Persistent Cross Site Scripting Vulnerability in eFront 3.6.14.4 Date: 05 June 2014 Exploit Author: shyamkumar somana Vendor Homepage: http://www.efrontlearning.net Software Link:...
eFront 3.6.14.4 profile.php 跨站脚本漏洞
No description provided by source...
CVE-2014-4033
Cross-site scripting XSS vulnerability in libraries/includes/personal/profile.php in Epignosis eFront 3.6.14.4 allows remote attackers to inject arbitrary web script or HTML via the surname parameter to student.php...
Cross site scripting
Cross-site scripting XSS vulnerability in libraries/includes/personal/profile.php in Epignosis eFront 3.6.14.4 allows remote attackers to inject arbitrary web script or HTML via the surname parameter to student.php...
CVE-2014-4033
Cross-site scripting XSS vulnerability in libraries/includes/personal/profile.php in Epignosis eFront 3.6.14.4 allows remote attackers to inject arbitrary web script or HTML via the surname parameter to student.php...
CVE-2014-4033
CVE-2014-4033 is an XSS vulnerability in Epignosis eFront 3.6.14.4, identified in libraries/includes/personal/profile.php. It can be triggered via the surname parameter to student.php to inject arbitrary web script/HTML. Red Hat and NVD entries reproduce the same description. Exploitation details...
CVE-2014-4033: Improper Neutralization of Input During Web Page Generation
Cross-site scripting XSS vulnerability in libraries/includes/personal/profile.php in Epignosis eFront 3.6.14.4 allows remote attackers to inject arbitrary web script or HTML via the surname parameter to student.php...
eFront 3.6.14.4 - surname Persistent Cross-Site Scripting
eFront 3.6.14.4 - surname Persistent Cross-Site Scripting Exploit Title: Persistent Cross Site Scripting Vulnerability in eFront 3.6.14.4 Date: 05 June 2014 Exploit Author: shyamkumar somana Vendor Homepage: http://www.efrontlearning.net Software Link:...