CVE-2006-6957

Docebo 3.0.3 and earlier are affected by PHP remote file inclusion via the Docebo GLOBALS vulnerability. When PHP register_globals is enabled, an attacker can cause arbitrary PHP code execution by passing a URL through the GLOBALS[where_framework] parameter (and variants via GLOBALS[where_cms] in...

CVE-2006-6957: Improper Control of Generation of Code

PHP remote file inclusion vulnerability in addons/modmedia/body.php in Docebo 3.0.3 and earlier, when registerglobals is enabled, allows remote attackers to execute arbitrary PHP code via a URL in the GLOBALSwhereframework parameter. NOTE: this issue might be resultant from a global overwrite...

CVE-2006-3107: Undefined Security Weakness

Multiple PHP remote file inclusion vulnerabilities in Docebo 3.0.3 and earlier, when registerglobals is enabled, allow remote attackers to execute arbitrary PHP code via a URL in 1 GLOBALSwhereframework to a admin/modules/news/newsclass.php and b admin/modules/content/contentclass.php, and 2...