cbcvebase.
CVE-2012-6515
published 2013-01-24

CVE-2012-6515: eFront 3.6.10, 3.6.11 build 15059, and earlier allows remote attackers to obtain sensitive information via invalid courses_ID parameter in the lesson_info…

PriorityP413medium5CVSS 2.0
AVNACLAuNCPINAN
EPSS
1.47%
70.5th percentile
eFront 3.6.10, 3.6.11 build 15059, and earlier allows remote attackers to obtain sensitive information via invalid courses_ID parameter in the lesson_info module to index.php, which reveals the installation path in an error message.

Affected

2 ranges
VendorProductVersion rangeFixed in
efrontlearningefront——
efrontlearningefront——
Stop checking back — get the weekly exploitation signal.

Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.