CVE-2006-3107

Docebo 3.0.3 and earlier are vulnerable to multiple PHP remote file inclusion flaws when PHP register_globals is enabled. The Docebo applications (DoceboCMS, DoceboLMS, DoceboKMS) expose GLOBALS-based vectors that allow an attacker to include remote files and execute code. Specifically, vectors u...