Directory traversal vulnerability in connector.php in the fckeditor2rc2 addon in DoceboLMS 2.0.4 allows remote malicious users to list arbitrary files and directories via ".." sequences in the Type parameter in a GetFoldersAndFiles command.
Vulnerable Product | Search on Vulmon | Subscribe to Product |
---|---|---|
docebolms docebolms 2.0.4 |