Absolute Path Traversal Vulnerability in eFront CMS 3.6.15.4 and Earlier

Absolute Path Traversal Vulnerability in eFront CMS 3.6.15.4 and Earlier

CVE-2015-4461 · MEDIUM Severity

AV:N/AC:L/AU:S/C:P/I:N/A:N

Absolute path traversal vulnerability in eFront CMS 3.6.15.4 and earlier allows remote Professor users to obtain sensitive information via a full pathname in the other parameter.

Learn more about our Cms Pen Testing.