CVE-2005-4094

HIGH 7.5CVE-2005-4094 · Published 08/12/2005 · updated 16/06/2026

In short

CVE-2005-4094 is a HIGH (CVSS 7.5) vulnerability affecting docebolms (docebolms).
Chance of exploitation in the next 30 days (EPSS): 2.0%, higher than 80.9% of all vulnerabilities.
No patched version is listed yet: follow the vendor's advisory in References.

Package	Affected versions	Patched versions
docebolms docebolms	`= 2.0.4`	No fix yet

Description

connector.php in the fckeditor2rc2 addon in DoceboLMS 2.0.4 allows remote attackers to execute arbitrary PHP by using the FileUpload command to upload a file that appears to be an image but contains PHP script.

References

rgod.altervista.org/docebo204_xpl.html · Exploit
secunia.com/advisories/1015308 · Vendor Advisory
secunia.com/advisories/17896 · Exploit
securitytracker.com/id
osvdb.org/21465
securityfocus.com/bid/15744 · Exploit
vupen.com/english/advisories/2005/2771
exchange.xforce.ibmcloud.com/vulnerabilities/23519

More vulnerabilities in docebolms

See all →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free