CVE-2019-5070
MEDIUM 6.5EPSS 1.0%
An exploitable SQL injection vulnerability exists in the unauthenticated portion of eFront LMS, versions v5.2.12 and earlier. Specially crafted web request to login page can cause SQL injections, resulting in data compromise. An attacker can use a browser to trigger these vulnerabilities, and no special tools are required.
- Affected
- Epignosis
- CVSS v3.1 NVD
- 6.5 MEDIUM
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N - CVSS v3.0 CISCO
- 6.5 MEDIUM
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N - CVSS v2.0 NVD
- 6.4 MEDIUM
AV:N/AC:L/Au:N/C:P/I:P/A:N - EPSS
- 1.03% chance of exploitation in the next 30 days, 63rd percentile
- Published
- 2019-09-05
- Updated
- 2024-08-04