Approved changes feed: RSS · Atom

cpe:2.3:a:efrontlearning:efront:3.6.10:*:*:*:*:*:*:*

part: a version: 3.6.10 update: *

VendorEfrontlearning (0c47eade-dc33-5531-97a8-f599c253c1da)
ProductEfront (77ee7a69-c3c8-5d32-a3e5-2c9279812851)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
pkg:github/caernel/efront_open_source purl2cpe 2026-06-01 10:16:57.947304
pkg:github/cmonterrosa/efront purl2cpe 2026-06-01 10:16:57.947306

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2012-6515 vulnerable 2026-06-08 05:03:00.591510 Details available
eFront 3.6.10, 3.6.11 build 15059, and earlier allows remote attackers to obtain sensitive information via invalid courses_ID parameter in the lesson_info module to index.php, which reveals the installation path in an error message.
Published: 2013-01-24T01:00:00.000Z
Updated: 2024-09-17T03:12:28.563Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.