Docebo 3.6.0.3 SQL Injection

Application: Docebo Version affected: 3.6.0.3 Website: http://www.docebo.com Discovered By: Andrea Fabrizi Email: [email protected] Web: http://www.andreafabrizi.it Vuln: Multiple SQL-Injection Vulnerabilities EXAMPLE 1 roland@hp6720s:$ echo -n "' union select userid,pass from coreuser -- ...

Docebo 3.6.0.3 - Multiple SQL Injections

Docebo 3.6.0.3 - Multiple SQL Injections Application: Docebo Version affected: 3.6.0.3 Website: http://www.docebo.com Discovered By: Andrea Fabrizi Email: andrea.fabrizi at gmail dot com email concealed Web: http://www.andreafabrizi.it Vuln: Multiple SQL-Injection Vulnerabilities EXAMPLE 1...