CVE-2012-0988

KnowledgeTree Community Edition vulnerable to multiple XSS in config/dmsDefaults.php (KnowledgeTree 3.7.0.2 and possibly earlier). The flaw allows remote attackers to inject arbitrary script/HTML via PATH_INFO parameters to login.php, admin.php, or preferences.php. Exploitation shown when AcceptP...

KnowledgeTree 3.7.0.2 Cross Site Scripting

Advisory ID: HTB23065 Reference: https://www.htbridge.ch/advisory/multiplevulnerabilitiesinknowledgetreecommunityedition.html Product: KnowledgeTree Commercial and Community Editions Vendor: KnowledgeTree Inc. http://knowledgetree.org Vulnerable Version: 3.7.0.2 and probably prior Tested Version:...

KnowledgeTree 3.x - Multiple Cross-Site Scripting Vulnerabilities

KnowledgeTree 3.x - Multiple Cross-Site Scripting Vulnerabilities source: https://www.securityfocus.com/bid/51373/info KnowledgeTree is prone to multiple cross-site scripting vulnerabilities because it fails to properly sanitize user-supplied input. An attacker may leverage these issues to execut...

KnowledgeTree 3.x - Multiple Cross-Site Scripting Vulnerabilities

source: https://www.securityfocus.com/bid/51373/info KnowledgeTree is prone to multiple cross-site scripting vulnerabilities because it fails to properly sanitize user-supplied input. An attacker may leverage these issues to execute arbitrary script code in the browser of an unsuspecting user in...

Multiple XSS in KnowledgeTree Community Edition

High-Tech Bridge SA Security Research Lab has discovered multiple vulnerabilities in KnowledgeTree Community Edition, which can be exploited to perform cross-site scripting attacks. 1 Cross-site scripting XSS vulnerabilities in KnowledgeTree Community Edition: CVE-2012-0988 Input appended to the...

KnowledgeTree login.php Blind SQL Injection

No description provided by source. Digital Defense, Inc. Vulnerability Research Team Credit: sxkeebler and r b13$ Vulnerability Description ------------------------- The KnowledgeTree login.php login page is vulnerable to a blind SQL injection vulnerability within the username field. An attacker...

KnowledgeTree 3.5.2 Community Edition Cross Site Scripting

Exploit Title: KnowledgeTree 3.5.2 Community Edition Permanent XSS Vulnerability Date: 2010-08-11 Author: fdisk Software Link: http://www.knowledgetree.com/products/community/download Version: 3.5.2 Notes: Fixed in the last version. Go to search box or search criteria, enter your javascript code...

KnowledgeTree 3.5.2 Community Edition - Persistent Cross-Site Scripting

Exploit Title: KnowledgeTree 3.5.2 Community Edition Permanent XSS Vulnerability Date: 2010-08-11 Author: @fdiskyou e-mail: rui at deniable.org Software Link: http://www.knowledgetree.com/products/community/download Version: 3.5.2 Notes: Fixed in the last version. Go to search box or search...

KnowledgeTree 3.5.2 Community Edition Permanent XSS Vulnerability

Exploit for php platform in category web applications ================================================================= KnowledgeTree 3.5.2 Community Edition Permanent XSS Vulnerability ================================================================= Exploit Title: KnowledgeTree 3.5.2 Community...

KnowledgeTree 3.5.2 Community Edition - Persistent Cross-Site Scripting

KnowledgeTree 3.5.2 Community Edition - Persistent Cross-Site Scripting Exploit Title: KnowledgeTree 3.5.2 Community Edition Permanent XSS Vulnerability Date: 2010-08-11 Author: @fdiskyou e-mail: rui at deniable.org Software Link: http://www.knowledgetree.com/products/community/download Version:...

Code injection

The DropDocuments plugin in KnowledgeTree before 3.5.4a allows remote authenticated users to gain administrative privileges via a certain sequence of "browse documents" and dashboard requests...

CVE-2008-5858

Multiple cross-site scripting XSS vulnerabilities in KnowledgeTree before 3.5.4a allow remote attackers to inject arbitrary web script or HTML via unspecified vectors, a different issue than CVE-2007-4281...

CVE-2008-5857

The DropDocuments plugin in KnowledgeTree before 3.5.4a allows remote authenticated users to gain administrative privileges via a certain sequence of "browse documents" and dashboard requests...

Cross site scripting

Multiple cross-site scripting XSS vulnerabilities in KnowledgeTree before 3.5.4a allow remote attackers to inject arbitrary web script or HTML via unspecified vectors, a different issue than CVE-2007-4281...

CVE-2008-5857

The DropDocuments plugin in KnowledgeTree before 3.5.4a allows remote authenticated users to gain administrative privileges via a certain sequence of "browse documents" and dashboard requests...

CVE-2008-5858

Multiple cross-site scripting XSS vulnerabilities in KnowledgeTree before 3.5.4a allow remote attackers to inject arbitrary web script or HTML via unspecified vectors, a different issue than CVE-2007-4281...

CVE-2008-5857

The DropDocuments plugin in KnowledgeTree before 3.5.4a allows remote authenticated users to gain administrative privileges via a certain sequence of "browse documents" and dashboard requests...

CVE-2008-5857

The CVE-2008-5857 issue affects the KnowledgeTree DropDocuments plugin used before version 3.5.4a . The vulnerability allows remote authenticated users to escalate privileges to administrative level by performing a specific sequence of actions involving "browse documents" and dashboard requests ....

CVE-2008-5858

CVE-2008-5858 relates to KnowledgeTree product families with Cross-Site Scripting (XSS) in multiple versions. Affected software/components include KnowledgeTree Open Source prior to 3.5.4a and related KnowledgeTree deployments referenced in connected documents (e.g., KnowledgeTree 3.x line). The ...

CVE-2008-5858

Multiple cross-site scripting XSS vulnerabilities in KnowledgeTree before 3.5.4a allow remote attackers to inject arbitrary web script or HTML via unspecified vectors, a different issue than CVE-2007-4281...