CVE-2006-2577

Docebo in Docebo LMS 3.0.3 and earlier is affected by multiple PHP remote file inclusion vulnerabilities that can let an attacker execute arbitrary PHP code. The issue arises when PHP register_globals is enabled and an attacker can supply a URL via the parameters where_cms, where_lms, where_upgra...