What’s Vulnerable › Vulnerabilities

CVE-2019-5070

• Severity: medium (CVSS 6.5 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 1.0% probability of exploitation in the next 30 days
• Public exploit or detection template: yes
• Published: 2019-09-05 · updated 2026-06-17
• Weakness: CWE-89

Description

An exploitable SQL injection vulnerability exists in the unauthenticated portion of eFront LMS, versions v5.2.12 and earlier. Specially crafted web request to login page can cause SQL injections, resulting in data compromise. An attacker can use a browser to trigger these vulnerabilities, and no special tools are required.

Affected products

• Epignosishq Efront Lms: through 5.2.12

References

• https://talosintelligence.com/vulnerability_reports/TALOS-2019-0859
• https://talosintelligence.com/vulnerability_reports/TALOS-2019-0859

Get alerted when CVE-2019-5070 or the next vulnerability affects your stack