Efront Learning efront 3.1.2
Approved changes feed: RSS · Atom
cpe:2.3:a:efrontlearning:efront:3.1.2:*:*:*:*:*:*:*
part: a version: 3.1.2 update: *
| Vendor | Efrontlearning (0c47eade-dc33-5531-97a8-f599c253c1da) |
|---|---|
| Product | Efront (77ee7a69-c3c8-5d32-a3e5-2c9279812851) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from NVD CPE 2.0 feed |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
pkg:github/caernel/efront_open_source |
purl2cpe | 2026-06-01 10:16:57.947263 |
pkg:github/cmonterrosa/efront |
purl2cpe | 2026-06-01 10:16:57.947264 |
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2010-1918 |
vulnerable | 2026-06-08 04:54:10.980615 |
Details available
SQL injection vulnerability in ask_chat.php in eFront 3.6.2 and earlier allows remote attackers to execute arbitrary SQL commands via the chatrooms_ID parameter.
Published: 2010-05-12T00:00:00.000Z
Updated: 2024-09-17T03:55:09.567Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2009-3660 |
vulnerable | 2026-06-08 04:51:43.545608 |
Details available
PHP remote file inclusion vulnerability in libraries/database.php in Efront 3.5.4 and earlier, when register_globals is enabled, allows remote attackers to execute arbitrary PHP code via a URL in the path parameter. NOTE: this is only a vulnerability when the administrator does not follow recommendations in the product's security documentation.
Published: 2009-10-11T22:00:00.000Z
Updated: 2024-08-07T06:38:30.094Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2008-7026 |
vulnerable | 2026-06-08 04:51:05.456196 |
Details available
Unrestricted file upload vulnerability in filesystem3.class.php in eFront 3.5.1 build 2710 and earlier allows remote attackers to execute arbitrary code by uploading a file with an executable extension as an avatar, then accessing it via a direct request to the file in (1) student/avatars/ or (2) professor/avatars/.
Published: 2009-08-21T14:00:00.000Z
Updated: 2024-08-07T11:49:03.202Z |
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.