CVE-2012-6515

Severity: medium (CVSS 5.0 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 1.5% probability of exploitation in the next 30 days
Public exploit or detection template: yes
Published: 2013-01-24 · updated 2026-06-16
Weakness: CWE-200

Description

eFront 3.6.10, 3.6.11 build 15059, and earlier allows remote attackers to obtain sensitive information via invalid courses_ID parameter in the lesson_info module to index.php, which reveals the installation path in an error message.

Affected products

Efrontlearning Efront: 3.6.10, 3.6.11

References

http://hauntit.blogspot.com/2012/04/en-efront-3610-cms-information.html
http://secunia.com/advisories/49003
http://www.securityfocus.com/bid/53272
http://hauntit.blogspot.com/2012/04/en-efront-3610-cms-information.html
http://secunia.com/advisories/49003
http://www.securityfocus.com/bid/53272

Get alerted when CVE-2012-6515 or the next vulnerability affects your stack