CVEvulnerability
CVE-2007-1240
4.3 MEDIUM
Official page ↗
- Status
- Modified
- Published
- 2007-03-03
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 4.3 MEDIUM — AV:N/AC:M/Au:N/C:N/I:P/A:N
- Weaknesses
- CWE-79
Description
Multiple cross-site scripting (XSS) vulnerabilities in Docebo CMS 3.0.3 through 3.0.5 allow remote attackers to inject arbitrary web script or HTML via (1) the searchkey parameter to index.php, or the (2) sn or (3) ri parameter to modules/htmlframechat/index.php. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information.
Affected configurations
• docebo docebo 3.0.3
• docebo docebo 3.0.4
• docebo docebo 3.0.5
Related
Weakness · CWE (1)
- CWE-79 Improper Neutralization of Input During Web Page Generation weakness
References
- http://downloads.securityfocus.com/vulnerabilities/exploits/22719.html Exploit
- http://osvdb.org/35995 osvdb.org
- http://osvdb.org/35996 osvdb.org
- http://www.securityfocus.com/bid/22719 Exploit
- https://exchange.xforce.ibmcloud.com/vulnerabilities/32842 exchange.xforce.ibmcloud.com
- http://downloads.securityfocus.com/vulnerabilities/exploits/22719.html Exploit
- http://osvdb.org/35995 osvdb.org
- http://osvdb.org/35996 osvdb.org
- http://www.securityfocus.com/bid/22719 Exploit
- https://exchange.xforce.ibmcloud.com/vulnerabilities/32842 exchange.xforce.ibmcloud.com