CVE-2015-4463

MEDIUM 6.5CVE-2015-4463 · Published 25/07/2017 · updated 17/06/2026

In short

CVE-2015-4463 is a MEDIUM (CVSS 6.5) vulnerability affecting efront (efrontlearning).
Chance of exploitation in the next 30 days (EPSS): 1.2%, higher than 67.4% of all vulnerabilities.
No patched version is listed yet: follow the vendor's advisory in References.

Package	Affected versions	Patched versions
efront efrontlearning	`≤ 3.6.15.4`	No fix yet

Description

The file_manager component in eFront CMS before 3.6.15.5 allows remote authenticated users to bypass intended file-upload restrictions by appending a crafted parameter to the file URL.

References

forum.efrontlearning.net/viewtopic.php · Vendor Advisory
mohankallepalli.blogspot.in/2015/05/eFront-cms-multiple-bugs.html · Exploit

More vulnerabilities in efront

See all →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free

Package

Affected versions

Patched versions

efront

efrontlearning

≤ 3.6.15.4

No fix yet

More vulnerabilities in efront

See all →