Multiple vulnerabilities in Efront

Vulnerability ID: HTB23053 Reference: https://www.htbridge.ch/advisory/multiplevulnerabilitiesinefront.html Product: Efront Vendor: EPIGNOSIS Ltd http://www.efrontlearning.net/ Vulnerable Version: 3.6.10 build 11944 and probably prior Tested Version: 3.6.10 build 11944 Vendor Notification: 12...

eFront <= 3.6.10 build 11944 Multiple XSS and SQLi Vulnerabilities

eFront is prone to multiple cross-site scripting XSS and SQL injection SQLi vulnerabilities because the software fails to sufficiently sanitize user-supplied input. SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C b...

eFront 3.6.x - Multiple Cross-Site Scripting SQL Injections

eFront 3.6.x - Multiple Cross-Site Scripting SQL Injections source: https://www.securityfocus.com/bid/50492/info eFront is prone to multiple cross-site scripting and SQL-injection vulnerabilities because the software fails to sufficiently sanitize user-supplied input. Exploiting these...

Efront 3.6.10 Build 11944 Cross Site Scripting / SQL Injection

Vulnerability ID: HTB23053 Reference: https://www.htbridge.ch/advisory/multiplevulnerabilitiesinefront.html Product: Efront Vendor: EPIGNOSIS Ltd http://www.efrontlearning.net/ Vulnerable Version: 3.6.10 build 11944 and probably prior Tested Version: 3.6.10 build 11944 Vendor Notification: 12...

eFront 3.6.10 Build 11944 Cross Site Scripting

Information --------------------------------- Name : XSS Vulnerabilities in eFront Software : eFront 3.6.10 build 11944 and possibly below. Vendor Homepage : http://efrontlearning.net/ Vulnerability Type : Cross-Site Scripting Severity : High Researcher : Canberk Bolat Advisory Reference :...

eFront 3.6.x - Multiple Cross-Site Scripting / SQL Injections

source: https://www.securityfocus.com/bid/50492/info eFront is prone to multiple cross-site scripting and SQL-injection vulnerabilities because the software fails to sufficiently sanitize user-supplied input. Exploiting these vulnerabilities could allow an attacker to steal cookie-based...

eFront <= 3.6.10 build 11944 Multiple XSS Vulnerabilities

eFront is prone to multiple cross-site scripting XSS vulnerabilities because the software fails to sufficiently sanitize user-supplied input. SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right...

eFront 3.6.10 Build 11944 - Multiple Cross-Site Scripting Vulnerabilities

eFront 3.6.10 Build 11944 - Multiple Cross-Site Scripting Vulnerabilities source: https://www.securityfocus.com/bid/50469/info eFront is prone to multiple cross-site scripting vulnerabilities because the software fails to sufficiently sanitize user-supplied input An attacker may leverage these...

eFront 3.6.10 Build 11944 - Multiple Cross-Site Scripting Vulnerabilities

source: https://www.securityfocus.com/bid/50469/info eFront is prone to multiple cross-site scripting vulnerabilities because the software fails to sufficiently sanitize user-supplied input An attacker may leverage these issues to execute arbitrary script code in the browser of an unsuspecting us...

eFront 3.6.10 Multiple Security Vulnerabilities

eFront is prone to multiple security vulnerabilities, including: - A remote code injection vulnerability - Multiple SQL injection vulnerabilities - An authentication bypass and privilege escalation vulnerability - A remote code execution vulnerability - A file upload vulnerability...

eFront 3.6.10 - professor.php Script Multiple SQL Injections

eFront 3.6.10 - professor.php Script Multiple SQL Injections source: https://www.securityfocus.com/bid/50419/info eFront is prone to multiple SQL-injection vulnerabilities because the application fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting these...

eFront Enterprise 3.6.10 Database Disclosure / SQL Injection

Title: ====== eFront Enterprise v3.6.10 - Multiple Remote Vulnerabilities Date: ===== 2011-10-27 References: =========== http://www.vulnerability-lab.com/getcontent.php?id=298 VL-ID: ===== 298 Introduction: ============= Tailored with larger organizations in mind, eFront Enterprise offers solutio...

eFront 3.6.10 - 'professor.php' Script Multiple SQL Injections

source: https://www.securityfocus.com/bid/50419/info eFront is prone to multiple SQL-injection vulnerabilities because the application fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting these issues could allow an attacker to compromise the application,...

eFront 3.6.10 (build 11944) - Multiple Vulnerabilities

eFront 3.6.10 build 11944 - Multiple Vulnerabilities ---------------------------------------------------------------- eFront = 3.6.10 build 11944 Multiple Security Vulnerabilities ---------------------------------------------------------------- author.............: EgiX mail...............:...

eFront 3.6.10 Build 11944 Shell Upload / Code Execution / SQL Injection

---------------------------------------------------------------- eFront = 3.6.10 build 11944 Multiple Security Vulnerabilities ---------------------------------------------------------------- author.............: EgiX mail...............: n0b0d13satgmaildotcom software link......:...

eFront 3.6.10 (build 11944) - Multiple Vulnerabilities

---------------------------------------------------------------- eFront = 3.6.10 build 11944 Multiple Security Vulnerabilities ---------------------------------------------------------------- author.............: EgiX mail...............: n0b0d13satgmaildotcom software link......:...

eFront <= 3.6.10 (build 11944) Multiple Security Vulnerabilities

Exploit for php platform in category web applications ---------------------------------------------------------------- eFront = 3.6.10 build 11944 Multiple Security Vulnerabilities ---------------------------------------------------------------- author.............: EgiX mail...............:...

eFront Enterprise v3.6.10 - Multiple Remote Vulnerabilities

Document Title: =============== eFront Enterprise v3.6.10 - Multiple Remote Vulnerabilities References Source: ==================== VL-ID http://www.vulnerability-lab.com/getcontent.php?id=298 CNNVD-201110-705 http://www.cnnvd.org.cn/vulnerability/show/cvcnnvdid/CNNVD-201110-705 Release Date:...

eFront Enterprise v3.6.10 - Multiple Remote Vulnerabilities

Document Title: =============== eFront Enterprise v3.6.10 - Multiple Remote Vulnerabilities References Source: ==================== VL-ID http://www.vulnerability-lab.com/getcontent.php?id=298 CNNVD-201110-705 http://www.cnnvd.org.cn/vulnerability/show/cvcnnvdid/CNNVD-201110-705 Release Date:...

Multiple vulnerabilities in Efront

High-Tech Bridge SA Security Research Lab has discovered multiple vulnerabilities in Efront, which can be exploited to perform SQL injection and cross-site scripting attacks. 1 Cross-Site scripting XSS vulnerabilities in Efront 1.1 Input passed via the "course" GET parameter to index.php is not...