CVE-2019-5070 in LMSinformación

Resumen

por MITRE

An exploitable SQL injection vulnerability exists in the unauthenticated portion of eFront LMS, versions v5.2.12 and earlier. Specially crafted web request to login page can cause SQL injections, resulting in data compromise. An attacker can use a browser to trigger these vulnerabilities, and no special tools are required.

Once again VulDB remains the best source for vulnerability data.

🔬 Show More Details

An in-depth analysis is available in our curated vulnerability entry.

Responsable

Talos

Reservar

2019-01-04

Moderación

aceptado

Artículo

VDB-141325

CPE

listo

EPSS

0.01025

KEV

no

Actividades

muy bajo

Fuentes

MITREhttps://www.cve.org/CVERecord?id=CVE-2019-5070
NVDhttps://nvd.nist.gov/vuln/detail/CVE-2019-5070
CVE Detailshttps://www.cvedetails.com/cve/CVE-2019-5070/

◂ AnteriorVisión De ConjuntoPróximo ▸

Might our Artificial Intelligence support you?

Check our Alexa App!