Skip to content
Noroxi

docebolms records

4 published records for vendor docebolms.

Filter by product ↓

Researcher profile

Entered KEV
0 · 0%
Weaponized
0 · 0%
Pre-auth RCE
2
With a fix record
0%
Median publish → KEV
No record has entered KEV

Pre-auth RCE: flaws that let an attacker run code over the network without an account. Median publish → KEV: the typical time between a record being published and CISA listing it as exploited.

Records by year

    Bar: total · dark part: CISA KEV.

    Recurring classes

      The weakness classes this vendor ships most often: where to look.

      CWE

      Attack profile

      All records

      4 records
      • CVE-2006-2668
        31Monitor

        Multiple PHP remote file inclusion vulnerabilities in Docebo LMS 2.05 allow remote attackers to execute arbitrary PHP code via a URL in the

        HighCVSS 7.5Proof of conceptEPSS 3%

        docebolms · docebolmsMay 30, 2006

      • CVE-2005-4094
        31Monitor

        connector.php in the fckeditor2rc2 addon in DoceboLMS 2.0.4 allows remote attackers to execute arbitrary PHP by using the FileUpload command

        HighCVSS 7.5No exploitEPSS 2%

        docebolms · docebolmsDec 8, 2005

      • CVE-2005-4095
        23Monitor

        Directory traversal vulnerability in connector.php in the fckeditor2rc2 addon in DoceboLMS 2.0.4 allows remote attackers to list arbitrary f

        MediumCVSS 5.0Proof of conceptEPSS 8%

        docebolms · docebolmsDec 8, 2005

      • CVE-2006-6857
        17Monitor

        Cross-site scripting (XSS) vulnerability in modules/credits/credits.php in Docebo LMS allows remote attackers to inject arbitrary web script

        MediumCVSS 4.3No exploitEPSS 0%

        docebolms · docebolmsDec 31, 2006