CVE-2006-6963

Multiple PHP remote file inclusion vulnerabilities in Docebo LMS 3.0.3 allow remote attackers to execute arbitrary PHP code via a URL in the GLOBALS[where_lms]…

published January 29, 2007

CVSS
—
EPSS
2%
Percentile
78.1
In the wild
Unconfirmed
What it is

Multiple PHP remote file inclusion vulnerabilities in Docebo LMS 3.0.3 allow remote attackers to execute arbitrary PHP code via a URL in the GLOBALS[where_lms] parameter to (1) class.module/class.definition.php and (2) modules/scorm/scorm_utils.php. NOTE: this issue may overlap CVE-2006-2577.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.01785 · 78.1th percentile
Published
2007-01-29T16:00Z
EPSS history
Timeline
  • 29 JAN 16:00Z
    Multiple PHP remote file inclusion vulnerabilities in Docebo LMS 3.0.3 allow remote attackers to execute arbitrary PHP code via a URL in the GLOBALS[where_lms]…
    cvelistv5