CVE-2006-6963: Undefined Security Weakness

Multiple PHP remote file inclusion vulnerabilities in Docebo LMS 3.0.3 allow remote attackers to execute arbitrary PHP code via a URL in the GLOBALSwherelms parameter to 1 class.module/class.definition.php and 2 modules/scorm/scormutils.php. NOTE: this issue may overlap CVE-2006-2577...

CVE-2006-2577: Undefined Security Weakness

Multiple PHP remote file inclusion vulnerabilities in Docebo 3.0.3 and earlier, when registerglobals is enabled, allow remote attackers to execute arbitrary PHP code via a URL in 1 wherecms, 2 wherelms, 3 whereupgrade, 4 BBCLIBPATH, and 5 BBCLANGUAGEPATH parameters in various unspecified scripts...