CVE-2005-4095

Docebolms - Path Traversal

Title source: rule

Description

Directory traversal vulnerability in connector.php in the fckeditor2rc2 addon in DoceboLMS 2.0.4 allows remote attackers to list arbitrary files and directories via ".." sequences in the Type parameter in a GetFoldersAndFiles command.

Exploits (1)

exploitdb WORKING POC VERIFIED

by rgod · phpwebappsphp

https://www.exploit-db.com/exploits/1356

View Code ZIP pw:eip

References (8)

[Third Party Advisory] http://www.vupen.com/english/advisories/2005/2771

[Exploit] http://www.securityfocus.com/bid/15742

[Exploit, Vendor Advisory] http://secunia.com/advisories/17896

[Third Party Advisory, VDB Entry] https://exchange.xforce.ibmcloud.com/vulnerabilities/23518

[Exploit, Vendor Advisory] http://rgod.altervista.org/docebo204_xpl.html

[Vendor Advisory] http://secunia.com/advisories/1015308

[Third Party Advisory, VDB Entry] http://www.osvdb.org/21464

[Third Party Advisory, VDB Entry] http://securitytracker.com/id?1015308

Scores

EPSS 0.1126

EPSS Percentile 93.5%

Details

Status published

Products (1)

docebolms/docebolms 2.0.4

Published Dec 08, 2005

Tracked Since Feb 18, 2026