CVE-2008-7153
SQL injection vulnerability in the autoDetectRegion function in doceboCore/lib/lib.regset.php in Docebo 3.5.0.3 and earlier allows remote attackers to execute arbitrary SQL commands via the Accept-Language HTTP header.
Does this matter?
High impact if exploited, but EPSS currently rates exploitation as unlikely (2.39%). Schedule it in the normal patch cycle and watch for a rise in EPSS or a public exploit.
Description
SQL injection vulnerability in the autoDetectRegion function in doceboCore/lib/lib.regset.php in Docebo 3.5.0.3 and earlier allows remote attackers to execute arbitrary SQL commands via the Accept-Language HTTP header. NOTE: this can be leveraged to execute arbitrary PHP code using the INTO DUMPFILE command.
- CVSS 2.0
- 7.5 HIGHAV:N/AC:L/Au:N/C:P/I:P/A:P
- EPSS
- 2.39% probability · 83th percentile
- CISA KEV
- Not listed
- Weakness
- CWE-89
- Affected
- docebo/docebo
- Source
- cve@mitre.org
References
- http://osvdb.org/40138
- http://secunia.com/advisories/28378Vendor Advisory
- http://www.docebo.org/doceboCms/bugtracker/18_124/bugdetails/appid_24-bugid_198/bugtracker.htmlPatch, Vendor Advisory
- http://www.securityfocus.com/bid/27211Exploit
- https://exchange.xforce.ibmcloud.com/vulnerabilities/39589
- https://www.exploit-db.com/exploits/4879
- https://www.exploit-db.com/exploits/4891
- http://osvdb.org/40138
- http://secunia.com/advisories/28378Vendor Advisory
- http://www.docebo.org/doceboCms/bugtracker/18_124/bugdetails/appid_24-bugid_198/bugtracker.htmlPatch, Vendor Advisory
- http://www.securityfocus.com/bid/27211Exploit
- https://exchange.xforce.ibmcloud.com/vulnerabilities/39589
- https://www.exploit-db.com/exploits/4879
- https://www.exploit-db.com/exploits/4891
Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.