← Back

Efront Lms

efront_lms

Vendor: Epignosishq • 2 CVEs

CVEs (2)

CVE
VENDORS
PRODUCTS
UPDATED
PUBLISHED
CVSS
CVE-2019-5070
1Epignosishq
1Efront Lms
Jun 17, 2026
Sep 5, 2019
N/A· v4
6.5 MEDIUM· v3
6.4 MEDIUM· v2
An exploitable SQL injection vulnerability exists in the unauthenticated portion of eFront LMS, versions v5.2.12 and earlier. Specially crafted web request to login page can cause SQL injections, resulting in data compro...Show more
An exploitable SQL injection vulnerability exists in the unauthenticated portion of eFront LMS, versions v5.2.12 and earlier. Specially crafted web request to login page can cause SQL injections, resulting in data compromise. An attacker can use a browser to trigger these vulnerabilities, and no special tools are required.Show less
CVE-2019-5069
1Epignosishq
1Efront Lms
Jun 17, 2026
Sep 5, 2019
N/A· v4
8.8 HIGH· v3
6.5 MEDIUM· v2
A code execution vulnerability exists in Epignosis eFront LMS v5.2.12. A specially crafted web request can cause unsafe deserialization potentially resulting in PHP code being executed. An attacker can send a crafted web...Show more
A code execution vulnerability exists in Epignosis eFront LMS v5.2.12. A specially crafted web request can cause unsafe deserialization potentially resulting in PHP code being executed. An attacker can send a crafted web parameter to trigger this vulnerability.Show less