PT-2014-4894

Name of the Vulnerable Software and Affected Versions KnowledgeTree versions 3.7.0.2 and earlier Description The issue allows remote attackers to execute arbitrary SQL commands. This is related to the getFileName function in the KTAPI UserSession class. The get active session function in...