CVE-2007-4281

Published: Aug 9, 2007Modified: Apr 23, 2026

4.3

Vector

AV:N/AC:M/Au:N/C:N/I:P/A:N

Exploitability: 8.6 / Impact: 2.9

Source: NVD

Description

Cross-site scripting (XSS) vulnerability in KnowledgeTree Open Source 3.4 and 3.4.1 allows remote attackers to inject arbitrary web script or HTML via the login field on the login page, and other unspecified vectors.

Affected (2)

Products: Knowledgetree: Open Source

Knowledgetree

1 product

Open Source

Configuration A

2 vulnerable

Vulnerable Software	Affected Versions
Knowledgetree Open Source	Version 3.4.1
Knowledgetree Open Source	Version 3.4

References (14)

http://osvdb.org/36579

Source: cve@mitre.org

http://secunia.com/advisories/26333

Source: cve@mitre.org

Vendor Advisory

http://sourceforge.net/forum/forum.php?forum_id=722865

Source: cve@mitre.org

http://sourceforge.net/project/shownotes.php?release_id=530698&group_id=107851

Source: cve@mitre.org

http://support.ktdms.com/browse/KTS-2178

Source: cve@mitre.org

http://www.securityfocus.com/bid/25231

Source: cve@mitre.org

http://www.vupen.com/english/advisories/2007/2812

Source: cve@mitre.org

http://osvdb.org/36579