PatchTheCVEdocebolms vulnerabilities
Recent CVEs affecting docebolms products. 4 tracked.
docebolms has 4 tracked vulnerabilities, 0 critical. A fixed release or vendor patch exists for 0. Most recent: 2006-12-31. Highest priority: CVE-2006-2668 (score 54/100).
- CVE-2006-6857 MEDIUM 4.3 MITIGATE Cross-site scripting (XSS) vulnerability in modules/credits/credits.php in Docebo LMS allows remote attackers
- CVE-2006-2668 HIGH 7.5 DOWNGRADE Multiple PHP remote file inclusion vulnerabilities in Docebo LMS 2.05 allow remote attackers to execute arbitr
- CVE-2005-4095 MEDIUM 5.0 DOWNGRADE Directory traversal vulnerability in connector.php in the fckeditor2rc2 addon in DoceboLMS 2.0.4 allows remote
- CVE-2005-4094 HIGH 7.5 DOWNGRADE connector.php in the fckeditor2rc2 addon in DoceboLMS 2.0.4 allows remote attackers to execute arbitrary PHP b
FAQ
How do I fix docebolms vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is docebolms being exploited right now?
None of the tracked docebolms CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which docebolms CVE should I patch first?
CVE-2006-2668 currently ranks highest (54/100): Multiple PHP remote file inclusion vulnerabilities in Docebo LMS 2.05 allow remote attackers to execute arbitr.