Skip to content
Noroxi

docebo records

13 published records for vendor docebo.

Researcher profile

Entered KEV
0 · 0%
Weaponized
0 · 0%
Pre-auth RCE
7
With a fix record
0%
Median publish → KEV
No record has entered KEV

Records by year

  1. 22

Bar: total · dark part: CISA KEV.

Recurring classes

The weakness classes this vendor ships most often: where to look.

CWE

Attack profile

All records

13 records
  • CVE-2022-31362
    40Plan

    Docebo Community Edition v4.0.5 and below was discovered to contain an arbitrary file upload vulnerability.

    HighCVSS 8.8No exploitEPSS 18%

    docebo · doceboJun 23, 2022

  • CVE-2022-31361
    39Monitor

    Docebo Community Edition v4.0.5 and below was discovered to contain a SQL injection vulnerability.

    CriticalCVSS 9.8No exploitEPSS 1%

    docebo · doceboJun 23, 2022

  • CVE-2008-7153
    31Monitor

    SQL injection vulnerability in the autoDetectRegion function in doceboCore/lib/lib.regset.php in Docebo 3.5.0.3 and earlier allows remote at

    HighCVSS 7.5Proof of conceptEPSS 2%

    docebo · doceboSep 2, 2009

  • CVE-2006-6963
    31Monitor

    Multiple PHP remote file inclusion vulnerabilities in Docebo LMS 3.0.3 allow remote attackers to execute arbitrary PHP code via a URL in the

    HighCVSS 7.5No exploitEPSS 1%

    docebo · doceboJan 29, 2007

  • CVE-2009-4742
    30Monitor

    Multiple SQL injection vulnerabilities in Docebo 3.6.0.3 allow remote attackers to execute arbitrary SQL commands via (1) the word parameter

    HighCVSS 7.5Proof of conceptEPSS 0%

    docebo · doceboMar 26, 2010

  • CVE-2006-6957
    27Monitor

    PHP remote file inclusion vulnerability in addons/mod_media/body.php in Docebo 3.0.3 and earlier, when register_globals is enabled, allows r

    MediumCVSS 6.8No exploitEPSS 1%

    docebo · doceboJan 29, 2007

  • CVE-2011-5135
    24Monitor

    Multiple SQL injection vulnerabilities in the save_connection function in lib/lib.iotask.php in the iotask module in DoceboLMS 4.0.4 and ear

    MediumCVSS 6.0Proof of conceptEPSS 0%

    docebo · docebolmsAug 30, 2012

  • CVE-2006-2576
    23Monitor

    Multiple PHP remote file inclusion vulnerabilities in Docebo 3.0.3 and earlier, when register_globals is enabled, allow remote attackers to

    MediumCVSS 5.1Proof of conceptEPSS 9%

    docebo · doceboMay 24, 2006

  • CVE-2008-7154
    21Monitor

    Docebo 3.5.0.3 and earlier allows remote attackers to obtain sensitive information via a direct request to (1) class/class.conf_fw.php, (2)

    MediumCVSS 5.0Proof of conceptEPSS 2%

    docebo · doceboSep 2, 2009

  • CVE-2006-2577
    21Monitor

    Multiple PHP remote file inclusion vulnerabilities in Docebo 3.0.3 and earlier, when register_globals is enabled, allow remote attackers to

    MediumCVSS 5.1Proof of conceptEPSS 2%

    docebo · doceboMay 24, 2006

  • CVE-2006-3107
    21Monitor

    Multiple PHP remote file inclusion vulnerabilities in Docebo 3.0.3 and earlier, when register_globals is enabled, allow remote attackers to

    MediumCVSS 5.1No exploitEPSS 1%

    docebo · doceboJun 20, 2006

  • CVE-2011-3726
    20Monitor

    DoceboLMS 4.0.4 allows remote attackers to obtain sensitive information via a direct request to a .php file, which reveals the installation

    MediumCVSS 5.0No exploitEPSS 1%

    docebo · docebolmsSep 23, 2011

  • CVE-2007-1240
    18Monitor

    Multiple cross-site scripting (XSS) vulnerabilities in Docebo CMS 3.0.3 through 3.0.5 allow remote attackers to inject arbitrary web script

    MediumCVSS 4.3Proof of conceptEPSS 3%

    docebo · doceboMar 3, 2007