• info
• discussion
• exploit
• solution
• references

DoceboLMS Connector.PHP Directory Traversal Vulnerability

Solution:
The vendor has released a minor and major upgrade to address this issue:


Docebo DoceboLMS 2.0.2

• DoceboLMS docebo30.zip
  http://www.docebolms.org/download.php?type=docs&pb=395&id=48


• DoceboLMS doceboLMS205.zip
  http://www.docebolms.org/download.php?type=docs&pb=321&id=49

Docebo DoceboLMS 2.0.3

• DoceboLMS docebo30.zip
  http://www.docebolms.org/download.php?type=docs&pb=395&id=48


• DoceboLMS doceboLMS205.zip
  http://www.docebolms.org/download.php?type=docs&pb=321&id=49

Docebo DoceboLMS 2.0.4

• DoceboLMS docebo30.zip
  http://www.docebolms.org/download.php?type=docs&pb=395&id=48


• DoceboLMS doceboLMS205.zip
  http://www.docebolms.org/download.php?type=docs&pb=321&id=49