CVE-2015-4461

MEDIUM 6.5CVE-2015-4461 · Published 05/02/2018 · updated 17/06/2026

In short

CVE-2015-4461 is a MEDIUM (CVSS 6.5) vulnerability affecting efront (efrontlearning).
Chance of exploitation in the next 30 days (EPSS): 1.2%, higher than 67.7% of all vulnerabilities.
No patched version is listed yet: follow the vendor's advisory in References.

Package	Affected versions	Patched versions
efront efrontlearning	`≤ 3.6.15.4`	No fix yet

Description

Absolute path traversal vulnerability in eFront CMS 3.6.15.4 and earlier allows remote Professor users to obtain sensitive information via a full pathname in the other parameter.

References

forum.efrontlearning.net/viewtopic.php · Broken Link
mohankallepalli.blogspot.in/2015/05/eFront-cms-multiple-bugs.html · Exploit

More vulnerabilities in efront

See all →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free

Package

Affected versions

Patched versions

efront

efrontlearning

≤ 3.6.15.4

No fix yet

More vulnerabilities in efront

See all →