Approved changes feed: RSS · Atom

cpe:2.3:a:efrontlearning:efront:3.6.14.4:*:*:*:*:*:*:*

part: a version: 3.6.14.4 update: *

VendorEfrontlearning (0c47eade-dc33-5531-97a8-f599c253c1da)
ProductEfront (77ee7a69-c3c8-5d32-a3e5-2c9279812851)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
pkg:github/caernel/efront_open_source purl2cpe 2026-06-01 10:16:57.947312
pkg:github/cmonterrosa/efront purl2cpe 2026-06-01 10:16:57.947314

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2014-4033 vulnerable 2026-06-08 05:05:44.004145 Details available
Cross-site scripting (XSS) vulnerability in libraries/includes/personal/profile.php in Epignosis eFront 3.6.14.4 allows remote attackers to inject arbitrary web script or HTML via the surname parameter to student.php.
Published: 2014-06-11T14:00:00.000Z
Updated: 2024-09-17T00:16:17.628Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.