eFront Enterprise v3.6.10 - Multiple Remote Vulnerabilities

Document Title: =============== eFront Enterprise v3.6.10 - Multiple Remote Vulnerabilities References Source: ==================== VL-ID http://www.vulnerability-lab.com/getcontent.php?id=298 CNNVD-201110-705 http://www.cnnvd.org.cn/vulnerability/show/cvcnnvdid/CNNVD-201110-705 Release Date:...

eFront <= 3.6.10 (build 11944) Multiple Security Vulnerabilities

Exploit for php platform in category web applications ---------------------------------------------------------------- eFront = 3.6.10 build 11944 Multiple Security Vulnerabilities ---------------------------------------------------------------- author.............: EgiX mail...............:...

eFront Enterprise v3.6.10 - Multiple Remote Vulnerabilities

Document Title: =============== eFront Enterprise v3.6.10 - Multiple Remote Vulnerabilities References Source: ==================== VL-ID http://www.vulnerability-lab.com/getcontent.php?id=298 CNNVD-201110-705 http://www.cnnvd.org.cn/vulnerability/show/cvcnnvdid/CNNVD-201110-705 Release Date:...

Multiple vulnerabilities in Efront

High-Tech Bridge SA Security Research Lab has discovered multiple vulnerabilities in Efront, which can be exploited to perform SQL injection and cross-site scripting attacks. 1 Cross-Site scripting XSS vulnerabilities in Efront 1.1 Input passed via the "course" GET parameter to index.php is not...

EFront 3.6.9 Community Edition multiple vulnerabilities-vulnerability warning-the black bar safety net

Exploit Title: EFront = 3.6.9 Community Edition Multiple Vulnerabilities Google Dork: "eFront version 3.6.9" inurl:index. php? ctg= Date: 5/09/2011 Public release: When 3.6.10 will be released Author: IHTeam Software Link:http://www.efrontlearning.net/download/download-efront.html Tested on:...

eFront Enterprise 3.6.9 Arbitrary File Download

Title: ====== eFront Enterprise v3.6.9 - Arbitrary Download Vulnerability Date: ===== 2011-10-08 References: =========== http://www.vulnerability-lab.com/getcontent.php?id=290 http://www.vulnerability-lab.com/getcontent.php?id=230 VL-ID: ===== 290 Introduction: ============= Tailored with larger...

EFront 3.6.9 Community Edition - Multiple Vulnerabilities

EFront 3.6.9 Community Edition - Multiple Vulnerabilities Exploit Title: EFront UNION ALL SELECT 1,2,3,password,5,6,login,8,9,10,11,12 FROM users -- www/professor.php?ctg=messages&folder= UNION ALL SELECT 1,2,3,password,5,6,login,8,9,10,11,12 FROM users -- www/admin.php?ctg=messages&folder= UNION...

eFront Enterprise Edition 3.6.9 SQL Injection

Title: ====== eFront Enterprise Edition v3.6.9 - SQL Injection Vulnerability Date: ===== 2011-10-07 References: =========== http://www.vulnerability-lab.com/getcontent.php?id=230 VL-ID: ===== 230 Introduction: ============= Tailored with larger organizations in mind, eFront Enterprise offers...

eFront 3.6.9 SQL Injection / Authentication Bypass

Exploit Title: EFront UNION ALL SELECT 1,2,3,password,5,6,login,8,9,10,11,12 FROM users -- www/professor.php?ctg=messages&folder= UNION ALL SELECT 1,2,3,password,5,6,login,8,9,10,11,12 FROM users -- www/admin.php?ctg=messages&folder= UNION ALL SELECT 1,2,3,password,5,6,login,8,9,10,11,12 FROM use...

eFront Enterprise v3.6.9 - Arbitrary Download Vulnerability

Document Title: =============== eFront Enterprise v3.6.9 - Arbitrary Download Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=290 http://www.vulnerability-lab.com/getcontent.php?id=230 Release Date: ============= 2011-10-07 Vulnerability...

EFront 3.6.9 Community Edition - Multiple Vulnerabilities

Exploit Title: EFront UNION ALL SELECT 1,2,3,password,5,6,login,8,9,10,11,12 FROM users -- www/professor.php?ctg=messages&folder= UNION ALL SELECT 1,2,3,password,5,6,login,8,9,10,11,12 FROM users -- www/admin.php?ctg=messages&folder= UNION ALL SELECT 1,2,3,password,5,6,login,8,9,10,11,12 FROM use...

eFront Enterprise v3.6.9 - Arbitrary Download Vulnerability

Document Title: =============== eFront Enterprise v3.6.9 - Arbitrary Download Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=290 http://www.vulnerability-lab.com/getcontent.php?id=230 Release Date: ============= 2011-10-07 Vulnerability...

EFront <= 3.6.9 Community Edition Multiple Vulnerabilities

Exploit for php platform in category web applications Exploit Title: EFront UNION ALL SELECT 1,2,3,password,5,6,login,8,9,10,11,12 FROM users -- www/professor.php?ctg=messages&folder= UNION ALL SELECT 1,2,3,password,5,6,login,8,9,10,11,12 FROM users -- www/admin.php?ctg=messages&folder= UNION ALL...

eFront Enterprise Edition v3.6.9 - SQL Injection Vulnerability

Document Title: =============== eFront Enterprise Edition v3.6.9 - SQL Injection Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=230 CNNVD-201110-706 http://www.cnnvd.org.cn/vulnerability/show/cvid/2011100706 Release Date: =============...

eFront Enterprise Edition v3.6.9 - SQL Injection Vulnerability

Document Title: =============== eFront Enterprise Edition v3.6.9 - SQL Injection Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=230 CNNVD-201110-706 http://www.cnnvd.org.cn/vulnerability/show/cvid/2011100706 Release Date: =============...

eFront <= 3.6.9 Build 11018 Multiple Vulnerabilities

eFront is prone to cross-site scripting XSS and local file inclusion LFI vulnerabilities. SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

eFront add administrator CSRF vulnerability-vulnerability warning-the black bar safety net

Vulnerability description: eFront is a tool for small and medium businesses, schools, government provide a PHP content management system, due to design defect, causing the remote to add the management, modification Management, Configuration, etc. multiple cross-site request forgery...

eFront enterprise <= XSRF (Add admin/change admin passwd)

Exploit for php platform in category web applications ================================================================================= . . . . | | ||/ | || | / / \ / /\ | | / | \ \ | |/ | \ / | || | // | / // | \ /\ | /|//|||| |\ | / /|| / Exploit-ID is the Indonesian Exploit Archive Web...

eFront Community++ <= XSRF (Add admin/change admin passwd)

Exploit for php platform in category web applications ================================================================================= . . . . | | ||/ | || | / / \ / /\ | | / | \ \ | |/ | \ / | || | // | / // | \ /\ | /|//|||| |\ | / /|| / Exploit-ID is the Indonesian Exploit Archive Web...

eFront Educational <=XSRF (Add admin/change admin passwd)

Exploit for php platform in category web applications ================================================================================= . . . . | | ||/ | || | / / \ / /\ | | / | \ \ | |/ | \ / | || | // | / // | \ /\ | /|//|||| |\ | / /|| / Exploit-ID is the Indonesian Exploit Archive Web...