TI-2018-15395 CVE-2018-25170 · GHSA-m4h5-jmjx-wc5rDoceboLMS 1.2 SQL Injection via lesson.phpPriority HIGH 77DoceboLMS 1.2 contains an SQL injection vulnerability that allows unauthenticated attackers to manipulate database queries by injecting SQL code through the id, idC, and idU parameters.CVSS 4.0HIGH 8.8· Network · No auth · No interaction · EPSS 0.00152 · Published 2026-03-06 · No fix listed CWE-352