CVE-2019-5070

CVSS 6.5 MEDIUMEPSS 1.0%CWE-89

Vexday Risk Score

13Bajo

Decisión SSVC (CISA)

Track

Sin señal de explotación → monitorear

CVSS 6.5EPSS 1.0%KEV nãoPoC —Nuclei —Metasploit —Patch —

Ciclo de vida

05 sep 2019Publicada en NVD

Recomendación: Monitorear — sin señal de explotación por ahora.

An exploitable SQL injection vulnerability exists in the unauthenticated portion of eFront LMS, versions v5.2.12 and earlier. Specially crafted web request to login page can cause SQL injections, resulting in data compromise. An attacker can use a browser to trigger these vulnerabilities, and no special tools are required.

CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N

Productos afectados

n/a · Epignosis

Referencias

https://talosintelligence.com/vulnerability_reports/TALOS-2019-0859