Docebo

    Dashboard / Vendors

    Products: 2
    Vulnerabilities: 14
    Known Exploited: 0
    1
    Critical Level Threats
    5
    High Level Threats
    8
    Medium Level Threats
    0
    Low Level Threats

    Vulnerabilities

    100806040200
    JanFebMarAprMayJunJulAugSepOctNovDec
    Critical Level Threats
    High Level Threats
    Medium Level Threats
    Low Level Threats

    Products Security index

    Actions
    Items Per Page

    Vulnerabilities

    CVE-2018-25170

    DoceboLMS 1.2 SQL Injection via lesson.php

    Last Modified: Apr 15, 2026
    Published: Mar 06, 2026

    CVE-2022-31361

    Docebo Community Edition v4.0.5 and below was discovered to contain a SQL injection vulnerability. NOTE: This vulnerability only affects products that are no longer supported by the maintainer

    Last Modified: Nov 21, 2024
    Published: Jun 22, 2022

    CVE-2022-31362

    Docebo Community Edition v4.0.5 and below was discovered to contain an arbitrary file upload vulnerability. NOTE: This vulnerability only affects products that are no longer supported by the maintainer

    Last Modified: Nov 21, 2024
    Published: Jun 22, 2022

    CVE-2011-5135

    Multiple SQL injection vulnerabilities in the save_connection function in lib/lib.iotask.php in the iotask module in DoceboLMS 4.0.4 and earlier allow remote authenticated users with admin or teacher privileges to execute arbitrary SQL commands via the (1) coursereportuiconfig[name] or (2) coursereportuiconfig[description] parameters to index.php.

    Last Modified: Apr 11, 2025
    Published: Aug 30, 2012

    CVE-2011-3726

    DoceboLMS 4.0.4 allows remote attackers to obtain sensitive information via a direct request to a .php file, which reveals the installation path in an error message, as demonstrated by views/dummy/show.php and certain other files.

    Last Modified: Apr 11, 2025
    Published: Sep 23, 2011
    Items Per Page