CVE-2022-31361

概要

参考情報

• blog.formalms.org/about/blog/20-life-after-docebo-the-forma-project-begins.html · Third Party Advisory
• swascan.com/security-advisory-docebo-community-edition · Exploit

docebo のその他の脆弱性

• CVE-2022-31362高 8.8Docebo Community Edition v4.0.5 and below was discovered to contain an arbitrary file upload vulnerability. NOTE: This vulnerability only af…
• CVE-2009-4742高 7.5Multiple SQL injection vulnerabilities in Docebo 3.6.0.3 allow remote attackers to execute arbitrary SQL commands via (1) the word parameter…
• CVE-2008-7154中 5.0Docebo 3.5.0.3 and earlier allows remote attackers to obtain sensitive information via a direct request to (1) class/class.conf_fw.php, (2) …
• CVE-2008-7153高 7.5SQL injection vulnerability in the autoDetectRegion function in doceboCore/lib/lib.regset.php in Docebo 3.5.0.3 and earlier allows remote at…
• CVE-2007-1240中 4.3Multiple cross-site scripting (XSS) vulnerabilities in Docebo CMS 3.0.3 through 3.0.5 allow remote attackers to inject arbitrary web script …