What’s Vulnerable › Vulnerabilities

CVE-2006-6963

• Severity: high (CVSS 7.5 v2.0)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 1.8% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2007-01-29 · updated 2026-06-16

Description

Multiple PHP remote file inclusion vulnerabilities in Docebo LMS 3.0.3 allow remote attackers to execute arbitrary PHP code via a URL in the GLOBALS[where_lms] parameter to (1) class.module/class.definition.php and (2) modules/scorm/scorm_utils.php. NOTE: this issue may overlap CVE-2006-2577.

Affected products

• Docebo: 3.0.3

References

• http://archives.neohapsis.com/archives/bugtraq/2006-06/0116.html
• http://securityreason.com/securityalert/2188
• http://www.docebo.org/doceboCms/bugtracker/18_124/bugdetails/appid_1-bugid_154/bugtracker.html
• http://www.osvdb.org/26712
• http://www.osvdb.org/26713
• https://exchange.xforce.ibmcloud.com/vulnerabilities/26633
• http://archives.neohapsis.com/archives/bugtraq/2006-06/0116.html
• http://securityreason.com/securityalert/2188
• http://www.docebo.org/doceboCms/bugtracker/18_124/bugdetails/appid_1-bugid_154/bugtracker.html
• http://www.osvdb.org/26712
• http://www.osvdb.org/26713
• https://exchange.xforce.ibmcloud.com/vulnerabilities/26633

Get alerted when CVE-2006-6963 or the next vulnerability affects your stack