Vulnerabilities > Epignosishq > Efront LMS > 5.2.5

DATE CVE VULNERABILITY TITLE RISK
2019-09-05 CVE-2019-5070 SQL Injection vulnerability in Epignosishq Efront LMS
An exploitable SQL injection vulnerability exists in the unauthenticated portion of eFront LMS, versions v5.2.12 and earlier.
network
low complexity
epignosishq CWE-89
6.4
6.4
2019-09-05 CVE-2019-5069 Deserialization of Untrusted Data vulnerability in Epignosishq Efront LMS
A code execution vulnerability exists in Epignosis eFront LMS v5.2.12.
network
low complexity
epignosishq CWE-502
6.5
6.5