Description
DoceboLMS 2.0.4的fckeditor2rc2加载项中的connector.php存在任意文件上传漏洞，远程攻击者可以使用FileUpload命令上传看似图像但包含PHP脚本的文件，以此来执行任意PHP。
DoceboLMS任意文件上传漏洞
PoC
None yet. Search at https://trap.biu.life/?ref=rssReferences
https://www.exploit-db.com/exploits/45858
https://nvd.nist.gov/vuln/detail/CVE-2005-4094
https://cve.imfht.com/detail/CVE-2005-4094
https://www.tinextacyber.com/security-advisory-docebo-community-edition-4-0-5-cve-2022-31361-cve-2022-31362/
https://app.opencve.io/cve/?vendor=docebo
https://stack.watch/product/docebo/