CVE-2006-2576
Docebo < 3.0.3 - Remote File Inclusion via GLOBALS Overwrite
Title source: llmExploitation Summary
EIP tracks 1 public exploit for CVE-2006-2576. PoCs published by Kacper.
AI-analyzed exploit summary This exploit demonstrates a Remote File Include (RFI) vulnerability in multiple Docebo products (CMS, Kms, Lms, Core, Scs) versions 3.0.3 and earlier. The vulnerability allows an attacker to include arbitrary remote files by manipulating the `GLOBALS[where_framework]` or `GLOBALS[where_scs]` parameters.
Description
Multiple PHP remote file inclusion vulnerabilities in Docebo 3.0.3 and earlier, when register_globals is enabled, allow remote attackers to execute arbitrary PHP code via a URL in (1) GLOBALS[where_framework] to (a) lib.simplesel.php, (b) lib.filelist.php, (c) tree.documents.php, (d) lib.repo.php, and (e) lib.php, and (2) GLOBALS[where_scs] to (f) lib.teleskill.php. NOTE: this issue might be resultant from a global overwrite vulnerability.
Exploits (1)
This exploit demonstrates a Remote File Include (RFI) vulnerability in multiple Docebo products (CMS, Kms, Lms, Core, Scs) versions 3.0.3 and earlier. The vulnerability allows an attacker to include arbitrary remote files by manipulating the `GLOBALS[where_framework]` or `GLOBALS[where_scs]` parameters.