CVE-2006-6963

CVE-2006-6963 affects Docebo LMS 3.0.3 and involves PHP remote file inclusions via the GLOBALS[where_lms] parameter in (1) class.module/class.definition.php and (2) modules/scorm/scorm_utils.php. Root cause is exploitation of PHP globals handling (register_globals context) enabling arbitrary PHP ...