CVE-2012-0988

🗓️ 20 Sep 2012 00:00:00Reported by mitreType

cve🔗 web.nvd.nist.gov👁 44 Views🌐 WEB

Multiple XSS vulnerabilities in KnowledgeTree 3.7.0.2 allow remote attackers to inject arbitrary web script or HTML

Reporter	Title	Published	Views	Family All 6
Circl	CVE-2012-0988	11 Jan 201200:00	–	circl
Cvelist	CVE-2012-0988	20 Sep 201200:00	–	cvelist
EUVD	EUVD-2012-1011	7 Oct 202500:30	–	euvd
htbridge	Multiple XSS in KnowledgeTree Community Edition	21 Dec 201100:00	–	htbridge
NVD	CVE-2012-0988	20 Sep 201200:55	–	nvd
Prion	Cross site scripting	20 Sep 201200:55	–	prion

NVD

Node

Source	Link
secunia	www.secunia.com/advisories/47531
exchange	www.exchange.xforce.ibmcloud.com/vulnerabilities/72308
knowledgetree	www.knowledgetree.org/Security_advisory:_URL_Manipulation
securityfocus	www.securityfocus.com/bid/51373
htbridge	www.htbridge.ch/advisory/multiple_vulnerabilities_in_knowledgetree_community_edition.html
archives	www.archives.neohapsis.com/archives/bugtraq/2012-01/0070.html

Parameter	Position	Path	Description	CWE
PATH_INFO	path	/login.php	XSS via PATH_INFO in login flow	CWE-79
PATH_INFO	path	/admin.php	XSS via PATH_INFO in admin flow	CWE-79
PATH_INFO	path	/preferences.php	XSS via PATH_INFO in preferences flow	CWE-79

16 Jun 2026 23:38Current

6Medium risk

Vulners AI Score6

CVSS 24.3

EPSS0.01803