DoceboLMS Arbitrary File Upload Vulnerability
BID:15744
Info
DoceboLMS Arbitrary File Upload Vulnerability
| Bugtraq ID: | 15744 |
| Class: | Input Validation Error |
| CVE: | |
| Remote: | Yes |
| Local: | No |
| Published: | Dec 06 2005 12:00AM |
| Updated: | Dec 06 2005 12:00AM |
| Credit: | rgod is credited with the discovery of this vulnerability. |
| Vulnerable: |
Docebo DoceboLMS 2.0.4 Docebo DoceboLMS 2.0.3 Docebo DoceboLMS 2.0.2 |
| Not Vulnerable: |
Docebo DoceboLMS 3.0 Docebo DoceboLMS 2.0.5 |
Discussion
DoceboLMS Arbitrary File Upload Vulnerability
DoceboLMS is prone to an arbitrary file upload vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input.
An attacker can exploit this issue to upload arbitrary files including PHP code, and execute it in the context of the Web server process. This may facilitate a compromise of the underlying system; other attacks are also possible.
DoceboLMS is prone to an arbitrary file upload vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input.
An attacker can exploit this issue to upload arbitrary files including PHP code, and execute it in the context of the Web server process. This may facilitate a compromise of the underlying system; other attacks are also possible.
Exploit / POC
DoceboLMS Arbitrary File Upload Vulnerability
No exploit is required.
The following proof of concept exploit is available:
No exploit is required.
The following proof of concept exploit is available:
Solution / Fix
DoceboLMS Arbitrary File Upload Vulnerability
Solution:
The vendor has released a major and minor upgrade to address this issue:
Docebo DoceboLMS 2.0.2
Docebo DoceboLMS 2.0.3
Docebo DoceboLMS 2.0.4
Solution:
The vendor has released a major and minor upgrade to address this issue:
Docebo DoceboLMS 2.0.2
-
DoceboLMS docebo30.zip
http://www.docebolms.org/download.php?type=docs&pb=395&id=48 -
DoceboLMS doceboLMS205.zip
http://www.docebolms.org/download.php?type=docs&pb=321&id=49
Docebo DoceboLMS 2.0.3
-
DoceboLMS docebo30.zip
http://www.docebolms.org/download.php?type=docs&pb=395&id=48 -
DoceboLMS doceboLMS205.zip
http://www.docebolms.org/download.php?type=docs&pb=321&id=49
Docebo DoceboLMS 2.0.4
-
DoceboLMS docebo30.zip
http://www.docebolms.org/download.php?type=docs&pb=395&id=48 -
DoceboLMS doceboLMS205.zip
http://www.docebolms.org/download.php?type=docs&pb=321&id=49
References
DoceboLMS Arbitrary File Upload Vulnerability
References:
References:
- DoceboLMS 2.0.4 remote commands execution (rgod)
- DoceboLMS Homepage (Docebo)