DoceboLMS 4.0.4 - Multiple Stored XSS Vulnerabilities

No description provided by source. !-- DoceboLMS 4.0.4 Multiple Stored XSS Vulnerabilities Vendor: Docebo Product web page: http://www.docebo.org Affected version: 4.0.4 CE Summary: DoceboLMS is a SCORM compliant Open Source e-Learning platform used in corporate, government and education markets...

CVE-2011-5135

Multiple SQL injection vulnerabilities in the saveconnection function in lib/lib.iotask.php in the iotask module in DoceboLMS 4.0.4 and earlier allow remote authenticated users with admin or teacher privileges to execute arbitrary SQL commands via the 1 coursereportuiconfigname or 2...

CVE-2011-5135

CVE-2011-5135 affects DoceboLMS prior to or including 4.0.4, in the save_connection function (lib/lib.iotask.php) of the iotask module. The vulnerability allows remote authenticated users with admin or teacher privileges to execute arbitrary SQL commands via the parameters coursereportuiconfig[na...

CVE-2011-5135

Multiple SQL injection vulnerabilities in the saveconnection function in lib/lib.iotask.php in the iotask module in DoceboLMS 4.0.4 and earlier allow remote authenticated users with admin or teacher privileges to execute arbitrary SQL commands via the 1 coursereportuiconfigname or 2...

Docebo Lms 4.0.4 - 'Messages' Remote Code Execution

if$GLOBALS'modname' != '' $modulecfg =& createModule$GLOBALS'modname'; ............ elseif$GLOBAL...

CVE-2011-3726

DoceboLMS 4.0.4 allows remote attackers to obtain sensitive information via a direct request to a .php file, which reveals the installation path in an error message, as demonstrated by views/dummy/show.php and certain other files...

Information disclosure

DoceboLMS 4.0.4 allows remote attackers to obtain sensitive information via a direct request to a .php file, which reveals the installation path in an error message, as demonstrated by views/dummy/show.php and certain other files...

CVE-2011-3726

CVE-2011-3726 affects DoceboLMS 4.0.4. A direct request to a PHP file such as views/dummy/show.php can disclose the installation path via an error message, enabling information disclosure. The vulnerability is described as an information leakage vector rather than code execution or authentication...

CVE-2011-3726

DoceboLMS 4.0.4 allows remote attackers to obtain sensitive information via a direct request to a .php file, which reveals the installation path in an error message, as demonstrated by views/dummy/show.php and certain other files...

DoceboLMS 4.0.4 Multiple Stored XSS Vulnerabilities

Exploit for php platform in category web applications DoceboLMS 4.0.4 Multiple Stored XSS Vulnerabilities function xss1document.forms"xss1".submit; function xss2document.forms"xss2".submit; form action="http://localhost/DoceboLMS404/doceboCore/index.php?modname=preassessment&op=modassessment"...

DoceboLMS 4.0.4 Cross Site Scripting

DoceboLMS 4.0.4 Multiple Stored XSS Vulnerabilities function xss1document.forms"xss1".submit; function xss2document.forms"xss2".submit; input type="hidden" name="authenticrequest" value="23dfee506a748201730ab2bb7...

DoceboLms 4.0.4 - Multiple Persistent Cross-Site Scripting Vulnerabilities

DoceboLms 4.0.4 - Multiple Persistent Cross-Site Scripting Vulnerabilities DoceboLMS 4.0.4 Multiple Stored XSS Vulnerabilities function xss1document.forms"xss1".submit; function xss2document.forms"xss2".submit; input type="hidden" name="authentic...

DoceboLms 4.0.4 - Multiple Persistent Cross-Site Scripting Vulnerabilities

DoceboLMS 4.0.4 Multiple Stored XSS Vulnerabilities function xss1document.forms"xss1".submit; function xss2document.forms"xss2".submit; input type="hidden" n...

DoceboLMS 4.0.4 Multiple Stored XSS Vulnerabilities

Summary DoceboLMS is a SCORM compliant Open Source e-Learning platform used in corporate, government and education markets. Description DoceboLMS suffers from multiple stored XSS vulnerabilities pre and post auth. Input thru the POST parameters 'name', 'code' and 'title' in index.php is not...

DoceboLms 4.0.4 - index.php Multiple HTML Injection Vulnerabilities

DoceboLms 4.0.4 - index.php Multiple HTML Injection Vulnerabilities source: https://www.securityfocus.com/bid/47150/info DoceboLMS is prone to multiple HTML-injection vulnerabilities because it fails to properly sanitize user-supplied input. Successful exploits will allow attacker-supplied HTML a...

DoceboLms 4.0.4 - 'index.php' Multiple HTML Injection Vulnerabilities

source: https://www.securityfocus.com/bid/47150/info DoceboLMS is prone to multiple HTML-injection vulnerabilities because it fails to properly sanitize user-supplied input. Successful exploits will allow attacker-supplied HTML and script code to run in the context of the affected browser,...

DoceboLMS Xss Vuln.

Bhhgroup.org & Trtekforum.com script name : MaviPortal tr Version : All script Download: http://www.docebo.org/doceboCms/index.php?mn=docs&op=download&pi=54&id=44 script sites : http://www.docebo.org Risk : High Found By : St@rExT Vulnerable file : arama.asp Xss Vuln:...

DoceboLms 2.0.x - Lang Multiple Remote File Inclusions

DoceboLms 2.0.x - Lang Multiple Remote File Inclusions source: https://www.securityfocus.com/bid/18110/info DoceboLMS is prone to multiple remote file-include vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input. An attacker can exploit...

DoceboLms 2.0.x - 'Lang' Multiple Remote File Inclusions

source: https://www.securityfocus.com/bid/18110/info DoceboLMS is prone to multiple remote file-include vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input. An attacker can exploit these issues to include an arbitrary remote file containi...

DoceboLms 2.0.5 - 'help.php' Remote File Inclusion

Vulnerable Script: Docebo LMS 2.05 Discovered: beford Noobs: %22Based+on+DoceboLMS+2.0%22 Vulnerable Files doceboLMS205/modules/credits/business.php = include$GET'lang'.'/language.php'; doceboLMS205/modules/credits/credits.php = include$GET'lang'.'/language.php';...