CVE-2011-5135

CVE-2011-5135 affects DoceboLMS prior to or including 4.0.4, in the save_connection function (lib/lib.iotask.php) of the iotask module. The vulnerability allows remote authenticated users with admin or teacher privileges to execute arbitrary SQL commands via the parameters coursereportuiconfig[na...