CVE-2011-5135: Docebo Docebolms

Medium severity, CVSS 6.0. EPSS: 0.9% chance of exploitation in the next 30 days.

Multiple SQL injection vulnerabilities in the save_connection function in lib/lib.iotask.php in the iotask module in DoceboLMS 4.0.4 and earlier allow remote authenticated users with admin or teacher privileges to execute arbitrary SQL commands via the (1) coursereportuiconfig[name] or (2) coursereportuiconfig[description] parameters to index.php.

Affected products

• Docebo Docebolms: up to and including 4.0.4; version 2.0.4 only; version 2.0.5 only; version 4.0 only

Published 2012-08-30. Last modified 2026-06-16.