CVE-2006-6963

CVE-2006-6963 describes multiple remote file inclusion vulnerabilities in Docebo LMS version 3.0.3. Attackers can exploit these flaws by injecting a malicious URL into the GLOBALS[where_lms] parameter in specific PHP files, leading to arbitrary PHP code execution. With a CVSS score of 7.5, this vulnerability is considered highly severe, allowing unauthenticated remote attackers to achieve partial confidentiality, integrity, and availability compromise with low attack complexity. There is no evidence of active exploitation, public exploit code (Metasploit, Nuclei, ExploitDB), or significant community discussion or media coverage surrounding this decade-old vulnerability.