CVE-2012-4269

MEDIUM 6.0CVE-2012-4269 · Published 13/08/2012 · updated 16/06/2026

In short

CVE-2012-4269 is a MEDIUM (CVSS 6.0) vulnerability affecting efront (efrontlearning).
Chance of exploitation in the next 30 days (EPSS): 2.1%, higher than 81.4% of all vulnerabilities.
No patched version is listed yet: follow the vendor's advisory in References.

Package	Affected versions	Patched versions
efront efrontlearning	`= 3.6.11`	No fix yet

Description

Unrestricted file upload vulnerability in eFront 3.6.11 allows remote authenticated users to execute arbitrary code by uploading a file with an executable extension via an attachment in a message.

References

packetstormsecurity.org/files/112496/Efront-3.6.11-Cross-Site-Scripting-Shell-Upload.html · Exploit
securityfocus.com/bid/53412
exchange.xforce.ibmcloud.com/vulnerabilities/75443

More vulnerabilities in efront

See all →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free