Vulnerabilities

TI-2012-00902 CVE-2012-0988 · GHSA-5wqw-6333-5244

Multiple cross-site scripting (XSS) vulnerabilities in config/dmsDefaults.php in…

LOW 24

Multiple cross-site scripting (XSS) vulnerabilities in config/dmsDefaults.php in KnowledgeTree 3.7.0.2 and possibly earlier allow remote attackers to inject arbitrary web script or HTML via the PATH_INFO to (1) login.php…

CVSS 2.0MEDIUM 4.3 Network No auth Interaction — EPSS 0.01803 Published 2012-09-20 No fix listed CWE-79

TI-2006-02794 CVE-2006-2886 · GHSA-pcv2-p6r7-x7x6

view.php in KnowledgeTree Open Source 3.0.3 and earlier allows remote attackers to obtain…

LOW 24

view.php in KnowledgeTree Open Source 3.0.3 and earlier allows remote attackers to obtain the full installation path via a crafted fDocumentId parameter, which displays the path in the resulting error message.

CVSS 2.0MEDIUM 4.3 Network No auth Interaction — EPSS 0.01802 Published 2006-06-07 No fix listed

Vulnerabilities

Filters

Multiple cross-site scripting (XSS) vulnerabilities in config/dmsDefaults.php in…

view.php in KnowledgeTree Open Source 3.0.3 and earlier allows remote attackers to obtain…