Vulnerabilities > Docebolms > Docebolms > 2.0.4

DATE CVE VULNERABILITY TITLE RISK
2005-12-08 CVE-2005-4095 Directory Traversal vulnerability in Docebolms 2.0.4
Directory traversal vulnerability in connector.php in the fckeditor2rc2 addon in DoceboLMS 2.0.4 allows remote attackers to list arbitrary files and directories via ".." sequences in the Type parameter in a GetFoldersAndFiles command.
network
low complexity
docebolms
5.0
2005-12-08 CVE-2005-4094 Unspecified vulnerability in Docebolms 2.0.4
connector.php in the fckeditor2rc2 addon in DoceboLMS 2.0.4 allows remote attackers to execute arbitrary PHP by using the FileUpload command to upload a file that appears to be an image but contains PHP script.
network
low complexity
docebolms
7.5