PatchTheCVEdocebolms vulnerabilities and fixes
Recent CVEs affecting docebolms, with upgrade or downgrade steps. 6 tracked.
docebolms has 6 tracked vulnerabilities, 0 critical. A fixed release or vendor patch exists for 1. Most recent: 2012-08-30. Highest priority: CVE-2006-2668 (score 54/100).
- CVE-2011-5135 MEDIUM 6.0 UPGRADE Multiple SQL injection vulnerabilities in the save_connection function in lib/lib.iotask.php in the iotask mod
- CVE-2011-3726 MEDIUM 5.0 DOWNGRADE DoceboLMS 4.0.4 allows remote attackers to obtain sensitive information via a direct request to a .php file, w
- CVE-2006-6857 MEDIUM 4.3 MITIGATE Cross-site scripting (XSS) vulnerability in modules/credits/credits.php in Docebo LMS allows remote attackers
- CVE-2006-2668 HIGH 7.5 DOWNGRADE Multiple PHP remote file inclusion vulnerabilities in Docebo LMS 2.05 allow remote attackers to execute arbitr
- CVE-2005-4095 MEDIUM 5.0 DOWNGRADE Directory traversal vulnerability in connector.php in the fckeditor2rc2 addon in DoceboLMS 2.0.4 allows remote
- CVE-2005-4094 HIGH 7.5 DOWNGRADE connector.php in the fckeditor2rc2 addon in DoceboLMS 2.0.4 allows remote attackers to execute arbitrary PHP b
FAQ
How do I fix docebolms vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is docebolms being exploited right now?
None of the tracked docebolms CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which docebolms CVE should I patch first?
CVE-2006-2668 currently ranks highest (54/100): Multiple PHP remote file inclusion vulnerabilities in Docebo LMS 2.05 allow remote attackers to execute arbitr.