Skip to content
Sign in
6.5 Medium

CVE-2019-5070 An exploitable SQL injection vulnerability exists in the unauthenticated portion of eFront LMS, versions v5.2.12 and…

Description

An exploitable SQL injection vulnerability exists in the unauthenticated portion of eFront LMS, versions v5.2.12 and earlier. Specially crafted web request to login page can cause SQL injections, resulting in data compromise. An attacker can use a browser to trigger these vulnerabilities, and no special tools are required.

Affected products and versions

Product Affected versions Fixed in
Epignosis Versions not published

Other CVEs of Epignosis

The 3 CVEs of Epignosis →
CVE-2020-28597 A predictable seed vulnerability exists in the password reset functionality of Epignosis EfrontPro 5.2.21 9.8 Critical CVE-2019-5069 A code execution vulnerability exists in Epignosis eFront LMS v5.2.12 8.8 High
Track this CVE