CVE-2005-4094: Docebolms

High severity, CVSS 7.5. EPSS: 2% chance of exploitation in the next 30 days.

connector.php in the fckeditor2rc2 addon in DoceboLMS 2.0.4 allows remote attackers to execute arbitrary PHP by using the FileUpload command to upload a file that appears to be an image but contains PHP script.

Affected products

• Docebolms Docebolms: version 2.0.4 only

Published 2005-12-08. Last modified 2026-06-16.