Lucene search
+L

273 matches found

Exploit DB
Exploit DB
•added 2009/09/15 12:00 a.m.•62 views

efront 3.5.4 - 'database.php?path' Remote File Inclusion

efront = 3.5.4 Remote File Include Vulnerability Download Script : http://sourceforge.net/projects/efrontlearning/files/ Author : cr4wl3r Contact : cr4wl3r4tlinuxmaildotorg Location : Gorontalo - INDONESIA file : database.php line 15 requireonce$path.'adodb/adodb.inc.php'; 3xplo!t :...

6.8CVSS5.8AI score0.0186EPSS
SaveExploits2
Prion
Prion
•added 2009/08/21 2:30 p.m.•30 views

Unrestricted file upload

Unrestricted file upload vulnerability in filesystem3.class.php in eFront 3.5.1 build 2710 and earlier allows remote attackers to execute arbitrary code by uploading a file with an executable extension as an avatar, then accessing it via a direct request to the file in 1 student/avatars/ or 2...

6.8CVSS8.3AI score0.04701EPSS
SaveExploits1References6Affected Software1
NVD
NVD
•added 2009/08/21 2:30 p.m.•36 views

CVE-2008-7026

Unrestricted file upload vulnerability in filesystem3.class.php in eFront 3.5.1 build 2710 and earlier allows remote attackers to execute arbitrary code by uploading a file with an executable extension as an avatar, then accessing it via a direct request to the file in 1 student/avatars/ or 2...

6.8CVSS7.7AI score0.04701EPSS
SaveExploits1References6
Cvelist
Cvelist
•added 2009/08/21 2:00 p.m.•49 views

CVE-2008-7026

Unrestricted file upload vulnerability in filesystem3.class.php in eFront 3.5.1 build 2710 and earlier allows remote attackers to execute arbitrary code by uploading a file with an executable extension as an avatar, then accessing it via a direct request to the file in 1 student/avatars/ or 2...

7.7AI score0.04701EPSS
SaveExploits1References6
CVE
CVE
•added 2009/08/21 2:00 p.m.•66 views

CVE-2008-7026

CVE-2008-7026 describes an unrestricted file-upload vulnerability in eFront (version 3.5.1 build 2710 and earlier) where an attacker can upload a file with an executable extension as a user avatar via the filesystem3.class.php upload process, and then access it through a direct request to the fil...

6.8CVSS6.7AI score0.04701EPSS
SaveExploits1References6Affected Software1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2009/08/21 12:00 a.m.•16 views

CVE-2008-7026: Undefined Security Weakness

Unrestricted file upload vulnerability in filesystem3.class.php in eFront 3.5.1 build 2710 and earlier allows remote attackers to execute arbitrary code by uploading a file with an executable extension as an avatar, then accessing it via a direct request to the file in 1 student/avatars/ or 2...

6.8CVSS6.5AI score0.04701EPSS
SaveExploits1References2
securityvulns
securityvulns
•added 2008/10/02 12:00 a.m.•121 views

Remote File Inclusion Vulnerability

-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=- eFront = 3.5.1 / build 2710: Remote File Inclusion Vulnerability -=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=- $ Program: eFront $ File affected: studentpage.php / professorpage $ Version: 3.5.1 / build 2710 $...

7.4AI score
SaveExploits0
seebug.org
seebug.org
•added 2008/10/01 12:00 a.m.•24 views

eFront <= 3.5.1 / build 2710 Remote Arbitrary Upload Vulnerability

No description provided by source. -=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=- eFront = 3.5.1 / build 2710: Remote File Inclusion Vulnerability -=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=- $ Program: eFront $ File affected: studentpage.php / professorpag...

7.1AI score
SaveExploits0
Packet Storm
Packet Storm
•added 2008/09/30 12:00 a.m.•52 views

efront-upload.txt

-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=- eFront eNYe-Sec - www.enye-sec.org -- Description by the author's page -- eFront is an easy to use, visually attractive, SCORM compatible, eLearning and Human Capital Development system. It is suitable for both company and...

7.4AI score
SaveExploits0
zdt
zdt
•added 2008/09/30 12:00 a.m.•28 views

eFront <= 3.5.1 / build 2710 Remote Arbitrary Upload Vulnerability

Exploit for unknown platform in category web applications ================================================================== eFront eNYe-Sec - www.enye-sec.org -- Description by the author's page -- eFront is an easy to use, visually attractive, SCORM compatible, eLearning and Human Capital...

7.1AI score
SaveExploits0
exploitpack
exploitpack
•added 2008/09/30 12:00 a.m.•29 views

eFront 3.5.1 build 2710 - Arbitrary File Upload

eFront 3.5.1 build 2710 - Arbitrary File Upload -=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=- eFront eNYe-Sec - www.enye-sec.org -- Description by the author's page -- eFront is an easy to use, visually attractive, SCORM compatible, eLearning and Human Capital Development...

0.3AI score
SaveExploits0
Exploit DB
Exploit DB
•added 2008/09/30 12:00 a.m.•54 views

eFront 3.5.1 / build 2710 - Arbitrary File Upload

-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=- eFront eNYe-Sec - www.enye-sec.org -- Description by the author's page -- eFront is an easy to use, visually attractive, SCORM compatible, eLearning and Human Capital Development system. It is suitable for both company and...

6.8CVSS5.8AI score0.04701EPSS
SaveExploits1
Packet Storm
Packet Storm
•added 2008/01/24 12:00 a.m.•32 views

efront-312-xss.txt

fuzion / // /\ / / : //\ /| : : .. / \ | | :: :: \ / | | :| || \ / | | || || |\ / | | || || | / | \ | || || | / /\ \ | || || | / / \ -/ -/ | |// \ --/ \ / / / / \ / \/ Product: efront e-learning LMS 3.1.2 http://www.efrontlearning.net/ Vulnerable: http://site/index.php?message=xss...

SaveExploits0
Rows per page
Query Builder