NVD

Id
65506  
Name
CVE-2006-6963  
Description
Multiple PHP remote file inclusion vulnerabilities in Docebo LMS 3.0.3 allow remote attackers to execute arbitrary PHP code via a URL in the GLOBALS[where_lms] parameter to (1) class.module/class.definition.php and (2) modules/scorm/scorm_utils.php. NOTE: this issue may overlap CVE-2006-2577.  
Reject
 
CVSS Version
2  
CVSS Score
7.5  
Severity
High  
CVSS Base Score
7.5  
CVSS Impact Subscore
6.4  
CVSS Exploit Subscore
10  
CVSS Vector
(AV:N/AC:L/Au:N/C:P/I:P/A:P)  
Pub Date
2016-12-20  
Published
2007-01-29  
Modified Date
2008-09-05  
Seq
2006-6963  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
341535 65506 CVE-2006-6963 20060609 Docebo Lms 3.0.3, Remote command execution  View
341536 65506 CVE-2006-6963 2188  View
341537 65506 CVE-2006-6963 http://www.docebo.org/doceboCms/bugtracker/18_124/bugdetails/appid_1-bugid_154/bugtracker.html  View
341538 65506 CVE-2006-6963 docebo-multiple-file-include(26633)  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
52556 JVNDB-2007-001248 Docebo LMS における PHP リモートファイルインクルージョンの脆弱性 Docebo LMS には、PHP リモートファイルインクルージョンの脆弱性が存在します。 CVE-2006-6963 23065 CVE-2006-6963 65506 7.5 http://jvndb.jvn.jp/ja/contents/2007/JVNDB-2007-001248.html 2007-01-29 2012-06-26 View