CVE-2006-3107: Undefined Security Weakness

Multiple PHP remote file inclusion vulnerabilities in Docebo 3.0.3 and earlier, when registerglobals is enabled, allow remote attackers to execute arbitrary PHP code via a URL in 1 GLOBALSwhereframework to a admin/modules/news/newsclass.php and b admin/modules/content/contentclass.php, and 2...

CVE-2006-2577: Undefined Security Weakness

Multiple PHP remote file inclusion vulnerabilities in Docebo 3.0.3 and earlier, when registerglobals is enabled, allow remote attackers to execute arbitrary PHP code via a URL in 1 wherecms, 2 wherelms, 3 whereupgrade, 4 BBCLIBPATH, and 5 BBCLANGUAGEPATH parameters in various unspecified scripts...