Multiple Docebo Products Multiple Remote File Include Vulnerabilities
BID:18109
Info
Multiple Docebo Products Multiple Remote File Include Vulnerabilities
| Bugtraq ID: | 18109 |
| Class: | Input Validation Error |
| CVE: | |
| Remote: | Yes |
| Local: | No |
| Published: | May 23 2006 12:00AM |
| Updated: | Aug 24 2006 08:49PM |
| Credit: | Kacper and Federico Fazzi are credited with the discovery of these vulnerabilities. k1tk4a <[email protected]> reported that versions 3.0.4 are still affected, and located further specific affected scripts. |
| Vulnerable: |
Docebo DoceboLMS 3.0.4 Docebo DoceboLMS 3.0.3 Docebo DoceboLMS 3.0 Docebo DoceboLMS 2.0.5 Docebo DoceboLMS 2.0.4 Docebo DoceboLMS 2.0.3 Docebo DoceboLMS 2.0.2 Docebo DoceboKMS 3.0.3 Docebo Docebo Core 3.0.3 Docebo Docebo CMS 3.0.4 Docebo Docebo CMS 3.0.3 |
| Not Vulnerable: | |
Discussion
Multiple Docebo Products Multiple Remote File Include Vulnerabilities
Docebo is prone to multiple remote file-include vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input.
An attacker can exploit these issues to include an arbitrary remote file containing malicious PHP code and execute it in the context of the webserver process. This may allow the attacker to compromise the application and the underlying system; other attacks are also possible.
Docebo versions 3.0.4 and prior are vulnerable to these issues.
Docebo is prone to multiple remote file-include vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input.
An attacker can exploit these issues to include an arbitrary remote file containing malicious PHP code and execute it in the context of the webserver process. This may allow the attacker to compromise the application and the underlying system; other attacks are also possible.
Docebo versions 3.0.4 and prior are vulnerable to these issues.
Exploit / POC
Multiple Docebo Products Multiple Remote File Include Vulnerabilities
This issue can be exploited through a web client.
The following proofs-of-concept URI are available:
This issue can be exploited through a web client.
The following proofs-of-concept URI are available:
Solution / Fix
Multiple Docebo Products Multiple Remote File Include Vulnerabilities
Solution:
Currently we are not aware of any vendor-supplied patches for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected]:[email protected]
Solution:
Currently we are not aware of any vendor-supplied patches for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected]:[email protected]
References
Multiple Docebo Products Multiple Remote File Include Vulnerabilities
References:
References:
- Docebo Homepage (Docebo)
- DoceboLMS Homepage (Docebo)
- Docebo CMS 3.0.3, Remote command execution (Federico Fazzi)
- Docebo Core 3.0.3, Remote command execution (Federico Fazzi)
- Docebo Kms 3.0.3, Remote command execution (Federico Fazzi)
- Docebo Lms 3.0.3, Remote command execution (Federico Fazzi)