Vulnerability in Efrontlearning Efront

CVE-2012-4269

Unrestricted file upload vulnerability in eFront 3.6.11 allows remote authenticated users to execute arbitrary code by uploading a file with an executable extension via an attachment in a message.

EPSS: 0.021 (79.4th percentile) — read the EPSS interpretation.

Affected products

Efrontlearning Efront — versions 3.6.11
N/a — versions n/a

References

cve@mitre.org (vdb-entry, x_refsource_BID)
cve@mitre.org (vdb-entry, x_refsource_XF)
cve@mitre.org (Exploit, x_refsource_MISC)