Unscored CVE-2006-6857 EUVD-2006-6840GHSA-3r4j-qhxv-8wr3

Cross-site scripting (XSS) vulnerability in modules/credits/credits.php in Docebo LMS allows remote attackers to inject arbitrary web scrip…

Published Jan 4, 2007 · Updated Aug 7, 2024 · Assigned by mitre

Description

Cross-site scripting (XSS) vulnerability in modules/credits/credits.php in Docebo LMS allows remote attackers to inject arbitrary web script or HTML via the lang parameter.

References

docebolms-credits-xss(31192) vdb-entry
20061229 DoceboLMS Xss Vuln. mailing-list