CVE-2019-5070

EPIGNOSIS eFront LMS SQL Injection (CVE-2019-5070) affects Epignosis eFront LMS

CVE-2019-5069

Epignosis eFront LMS v5.2.12 is affected by a PHP deserialization code execution vulnerability (CVE-2019-5069). Cisco Talos (TALOS-2019-0858) describes unsafe deserialization of untrusted data leading to remote code execution. Affected component is the LMS PHP backend; deserialization occurs when...