CVE-2005-4094

HOCH 7.5CVE-2005-4094 · Published 08/12/2005 · updated 16/06/2026

Kurz gesagt

CVE-2005-4094 ist eine Schwachstelle (HOCH (CVSS 7.5)) in docebolms (docebolms).
Wahrscheinlichkeit einer Ausnutzung in den nächsten 30 Tagen (EPSS): 2.0%, höher als bei 80.9% aller Schwachstellen.
Noch keine gepatchte Version bekannt: Herstellerhinweise unter Referenzen verfolgen.

Package	Affected versions	Patched versions
docebolms docebolms	`= 2.0.4`	No fix yet

Description

connector.php in the fckeditor2rc2 addon in DoceboLMS 2.0.4 allows remote attackers to execute arbitrary PHP by using the FileUpload command to upload a file that appears to be an image but contains PHP script.

References

rgod.altervista.org/docebo204_xpl.html · Exploit
secunia.com/advisories/1015308 · Vendor Advisory
secunia.com/advisories/17896 · Exploit
securitytracker.com/id
osvdb.org/21465
securityfocus.com/bid/15744 · Exploit
vupen.com/english/advisories/2005/2771
exchange.xforce.ibmcloud.com/vulnerabilities/23519

Weitere Schwachstellen in docebolms

Alle anzeigen →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free