Browse CVEs

CRITICAL 9.8 CVE-2022-31361 Docebo Community Edition v4.0.5 and below was discovered to contain a SQL injection vulnerability. NOTE: This vulnerability only affects products tha… Docebo after 4.0.5 Fix from $2,3002022-06-23 HIGH 8.8 CVE-2022-31362EPSS 18% Docebo Community Edition v4.0.5 and below was discovered to contain an arbitrary file upload vulnerability. NOTE: This vulnerability only affects pro… Docebo after 4.0.5 Fix from $1,9502022-06-23 MEDIUM 6.0 CVE-2011-5135 Multiple SQL injection vulnerabilities in the save_connection function in lib/lib.iotask.php in the iotask module in DoceboLMS 4.0.4 and earlier allo… Docebolms after 4.0.4 Fix from $1,6002012-08-30 MEDIUM 5.0 CVE-2011-3726 DoceboLMS 4.0.4 allows remote attackers to obtain sensitive information via a direct request to a .php file, which reveals the installation path in a… Docebolms No fix yet Fix from $1,6002011-09-23 HIGH 7.5 CVE-2009-4742 Multiple SQL injection vulnerabilities in Docebo 3.6.0.3 allow remote attackers to execute arbitrary SQL commands via (1) the word parameter in a pla… Docebo No fix yet Fix from $1,9502010-03-26 HIGH 7.5 CVE-2008-7153 SQL injection vulnerability in the autoDetectRegion function in doceboCore/lib/lib.regset.php in Docebo 3.5.0.3 and earlier allows remote attackers t… Docebo after 3.5.0.3 Fix from $1,9502009-09-02 MEDIUM 5.0 CVE-2008-7154 Docebo 3.5.0.3 and earlier allows remote attackers to obtain sensitive information via a direct request to (1) class/class.conf_fw.php, (2) class.mod… Docebo after 3.5.0.3 Fix from $1,6002009-09-02 HIGH 7.5 CVE-2006-6963 Multiple PHP remote file inclusion vulnerabilities in Docebo LMS 3.0.3 allow remote attackers to execute arbitrary PHP code via a URL in the GLOBALS[… Docebo Patch available Fix from $1,9502007-01-29 MEDIUM 6.8 CVE-2006-6957 PHP remote file inclusion vulnerability in addons/mod_media/body.php in Docebo 3.0.3 and earlier, when register_globals is enabled, allows remote att… Docebo after 3.0.3 Fix from $1,6002007-01-29 MEDIUM 5.1 CVE-2006-3107 Multiple PHP remote file inclusion vulnerabilities in Docebo 3.0.3 and earlier, when register_globals is enabled, allow remote attackers to execute a… Docebo after 3.0.3 Fix from $1,6002006-06-21 MEDIUM 5.1 CVE-2006-2576EPSS 9% Multiple PHP remote file inclusion vulnerabilities in Docebo 3.0.3 and earlier, when register_globals is enabled, allow remote attackers to execute a… Docebo after 3.0.3 Fix from $1,6002006-05-24 MEDIUM 5.1 CVE-2006-2577 Multiple PHP remote file inclusion vulnerabilities in Docebo 3.0.3 and earlier, when register_globals is enabled, allow remote attackers to execute a… Docebo after 3.0.3 Fix from $1,6002006-05-24