eFront Enterprise v3.6.10 - File Include Vulnerability

Document Title: =============== eFront Enterprise v3.6.10 - File Include Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=296 Release Date: ============= 2012-01-06 Vulnerability Laboratory ID VL-ID: ==================================== 296...

eFront 3.6.10 - 'download' Directory Traversal

source: https://www.securityfocus.com/bid/51302/info eFront is prone to a directory-traversal vulnerability because it fails to sufficiently sanitize user-supplied input data. Successfully exploiting the issue may allow an attacker to obtain sensitive information that could aid in further attacks...

Multiple vulnerabilities in Efront

Vulnerability ID: HTB23053 Reference: https://www.htbridge.ch/advisory/multiplevulnerabilitiesinefront.html Product: Efront Vendor: EPIGNOSIS Ltd http://www.efrontlearning.net/ Vulnerable Version: 3.6.10 build 11944 and probably prior Tested Version: 3.6.10 build 11944 Vendor Notification: 12...

eFront <= 3.6.10 (build 11944) Multiple Security Vulnerabilities

---------------------------------------------------------------- eFront = 3.6.10 build 11944 Multiple Security Vulnerabilities ---------------------------------------------------------------- author.............: EgiX mail...............: n0b0d13satgmaildotcom software link......:...

XSS Vulnerabilities in eFront

Information --------------------------------- Name : XSS Vulnerabilities in eFront Software : eFront 3.6.10 build 11944 and possibly below. Vendor Homepage : http://efrontlearning.net/ Vulnerability Type : Cross-Site Scripting Severity : High Researcher : Canberk Bolat Advisory Reference :...

eFront <= 3.6.10 build 11944 Multiple XSS and SQLi Vulnerabilities

eFront is prone to multiple cross-site scripting XSS and SQL injection SQLi vulnerabilities because the software fails to sufficiently sanitize user-supplied input. SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C b...

eFront 3.6.x - Multiple Cross-Site Scripting SQL Injections

eFront 3.6.x - Multiple Cross-Site Scripting SQL Injections source: https://www.securityfocus.com/bid/50492/info eFront is prone to multiple cross-site scripting and SQL-injection vulnerabilities because the software fails to sufficiently sanitize user-supplied input. Exploiting these...

Efront 3.6.10 Build 11944 Cross Site Scripting / SQL Injection

Vulnerability ID: HTB23053 Reference: https://www.htbridge.ch/advisory/multiplevulnerabilitiesinefront.html Product: Efront Vendor: EPIGNOSIS Ltd http://www.efrontlearning.net/ Vulnerable Version: 3.6.10 build 11944 and probably prior Tested Version: 3.6.10 build 11944 Vendor Notification: 12...

eFront 3.6.10 Build 11944 Cross Site Scripting

Information --------------------------------- Name : XSS Vulnerabilities in eFront Software : eFront 3.6.10 build 11944 and possibly below. Vendor Homepage : http://efrontlearning.net/ Vulnerability Type : Cross-Site Scripting Severity : High Researcher : Canberk Bolat Advisory Reference :...

eFront <= 3.6.10 build 11944 Multiple XSS Vulnerabilities

eFront is prone to multiple cross-site scripting XSS vulnerabilities because the software fails to sufficiently sanitize user-supplied input. SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right...

eFront 3.6.x - Multiple Cross-Site Scripting / SQL Injections

source: https://www.securityfocus.com/bid/50492/info eFront is prone to multiple cross-site scripting and SQL-injection vulnerabilities because the software fails to sufficiently sanitize user-supplied input. Exploiting these vulnerabilities could allow an attacker to steal cookie-based...

eFront 3.6.10 Build 11944 - Multiple Cross-Site Scripting Vulnerabilities

eFront 3.6.10 Build 11944 - Multiple Cross-Site Scripting Vulnerabilities source: https://www.securityfocus.com/bid/50469/info eFront is prone to multiple cross-site scripting vulnerabilities because the software fails to sufficiently sanitize user-supplied input An attacker may leverage these...

eFront 3.6.10 Build 11944 - Multiple Cross-Site Scripting Vulnerabilities

source: https://www.securityfocus.com/bid/50469/info eFront is prone to multiple cross-site scripting vulnerabilities because the software fails to sufficiently sanitize user-supplied input An attacker may leverage these issues to execute arbitrary script code in the browser of an unsuspecting us...

eFront 3.6.10 Multiple Security Vulnerabilities

eFront is prone to multiple security vulnerabilities, including: - A remote code injection vulnerability - Multiple SQL injection vulnerabilities - An authentication bypass and privilege escalation vulnerability - A remote code execution vulnerability - A file upload vulnerability...

eFront Enterprise 3.6.10 Database Disclosure / SQL Injection

Title: ====== eFront Enterprise v3.6.10 - Multiple Remote Vulnerabilities Date: ===== 2011-10-27 References: =========== http://www.vulnerability-lab.com/getcontent.php?id=298 VL-ID: ===== 298 Introduction: ============= Tailored with larger organizations in mind, eFront Enterprise offers solutio...

eFront 3.6.10 - professor.php Script Multiple SQL Injections

eFront 3.6.10 - professor.php Script Multiple SQL Injections source: https://www.securityfocus.com/bid/50419/info eFront is prone to multiple SQL-injection vulnerabilities because the application fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting these...

eFront 3.6.10 - 'professor.php' Script Multiple SQL Injections

source: https://www.securityfocus.com/bid/50419/info eFront is prone to multiple SQL-injection vulnerabilities because the application fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting these issues could allow an attacker to compromise the application,...

eFront 3.6.10 (build 11944) - Multiple Vulnerabilities

eFront 3.6.10 build 11944 - Multiple Vulnerabilities ---------------------------------------------------------------- eFront = 3.6.10 build 11944 Multiple Security Vulnerabilities ---------------------------------------------------------------- author.............: EgiX mail...............:...

eFront 3.6.10 Build 11944 Shell Upload / Code Execution / SQL Injection

---------------------------------------------------------------- eFront = 3.6.10 build 11944 Multiple Security Vulnerabilities ---------------------------------------------------------------- author.............: EgiX mail...............: n0b0d13satgmaildotcom software link......:...

eFront 3.6.10 (build 11944) - Multiple Vulnerabilities

---------------------------------------------------------------- eFront = 3.6.10 build 11944 Multiple Security Vulnerabilities ---------------------------------------------------------------- author.............: EgiX mail...............: n0b0d13satgmaildotcom software link......:...