Skip to content
Sign in
8.8 High

CVE-2019-5069 A code execution vulnerability exists in Epignosis eFront LMS v5.2.12

Description

A code execution vulnerability exists in Epignosis eFront LMS v5.2.12. A specially crafted web request can cause unsafe deserialization potentially resulting in PHP code being executed. An attacker can send a crafted web parameter to trigger this vulnerability.

Affected products and versions

Product Affected versions Fixed in
Epignosis Versions not published

Other CVEs of Epignosis

The 3 CVEs of Epignosis →
CVE-2020-28597 A predictable seed vulnerability exists in the password reset functionality of Epignosis EfrontPro 5.2.21 9.8 Critical CVE-2019-5070 An exploitable SQL injection vulnerability exists in the unauthenticated portion of eFront LMS, versions v5.2.12 and… 6.5 Medium
Track this CVE