ID de Prueba:	1.3.6.1.4.1.25623.1.0.200011
Categoría:	Web application abuses
Título:	Docebo GLOBALS Variable Overwrite Vulnerability (Aug 2008)
Resumen:	Docebo is prone to vulnerable remote and local file inclusion; vulnerabilities.
Descripción:	Summary: Docebo is prone to vulnerable remote and local file inclusion vulnerabilities. Vulnerability Insight: By using a flaw in some PHP versions (PHP4 <= 4.4.0 and PHP5 <= 5.0.5) it is possible to include files by overwriting the $GLOBALS variable. This flaw exists if PHP's register_globals is enabled. Solution: Disable PHP's register_globals and/or upgrade to a newer PHP release. CVSS Score: 5.1 CVSS Vector: AV:N/AC:H/Au:N/C:P/I:P/A:P
Referencia Cruzada:	Common Vulnerability Exposure (CVE) ID: CVE-2006-2576 Bugtraq: 20060609 Docebo Kms 3.0.3, Remote command execution (Google Search) http://archives.neohapsis.com/archives/bugtraq/2006-06/0113.html https://www.exploit-db.com/exploits/1817 http://www.osvdb.org/25757 http://www.osvdb.org/26711 http://secunia.com/advisories/20260 http://www.vupen.com/english/advisories/2006/1935 XForce ISS Database: docebo-multiple-file-include(26633) https://exchange.xforce.ibmcloud.com/vulnerabilities/26633 Common Vulnerability Exposure (CVE) ID: CVE-2006-2577
Copyright	Copyright (C) 2008 Ferdy Riphagen

Esta es sólo una de 146377 pruebas de vulnerabilidad en nuestra serie de pruebas. Encuentre más sobre cómo ejecutar una auditoría de seguridad completa. Para ejecutar una prueba gratuita de esta vulnerabilidad contra su sistema, regístrese ahora.