Efront Lms

2 CVEs product

Monthly

Sort: Newest CVSS Score EPSS Score Oldest

CVE-2019-5070 MEDIUM POC This Month

An exploitable SQL injection vulnerability exists in the unauthenticated portion of eFront LMS, versions v5.2.12 and earlier. Rated medium severity (CVSS 6.5), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available.

SQLi Efront Lms

NVD

CVSS 3.1

6.5

EPSS

1.0%

CVE-2019-5069 HIGH POC This Week

A code execution vulnerability exists in Epignosis eFront LMS v5.2.12. Rated high severity (CVSS 8.8), this vulnerability is remotely exploitable, low attack complexity. Public exploit code available and no vendor patch available.

PHP RCE Deserialization Efront Lms

NVD

CVSS 3.1

8.8

EPSS

2.3%

CVE-2019-5070

EPSS 1% CVSS 6.5

MEDIUM POC This Month

SQLi Efront Lms

NVD

CVE-2019-5069

EPSS 2% CVSS 8.8

HIGH POC This Week

PHP RCE Deserialization +1

NVD