high8.8
CVE-2019-5069
A code execution vulnerability exists in Epignosis eFront LMS v5.2.12.
Impact
A code execution vulnerability exists in Epignosis eFront LMS v5.2.12. A specially crafted web request can cause unsafe deserialization potentially resulting in PHP code being executed. An attacker can send a crafted web parameter to trigger this vulnerability.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Epignosishq | Efront Lms | through 5.2.12 |