CVE:CVE-2007-1240
CNNVD:CNNVD-200703-131
Docebo CMS 3.0.3到3.0.5版本中存在多个跨站脚本攻击漏洞。远程攻击者可以提交searchkey参数到index.php或sn、ri参数到modules/htmlframechat/index.php，注入任意的web脚本或HTML。
solution:Upgrade docebo docebo to a higher version than 3.0.3,3.0.4,3.0.5,and avoid the version 3.0.3,3.0.4,3.0.5