CVE-2008-5857

Published: Jan 6, 2009Modified: Apr 23, 2026

6.5

Vector

AV:N/AC:L/Au:S/C:P/I:P/A:P

Exploitability: 8.0 / Impact: 6.4

Source: NVD

Description

The DropDocuments plugin in KnowledgeTree before 3.5.4a allows remote authenticated users to gain administrative privileges via a certain sequence of "browse documents" and dashboard requests.

Affected (31)

Products: Knowledgetree Document Management: Knowledgetree Document Management

Knowledgetree Document Management

1 product

Knowledgetree Document Management

Configuration A

31 vulnerable

Vulnerable Software	Affected Versions
Knowledgetree Document Management Knowledgetree Document Management	Up to 3.5.4
Knowledgetree Document Management Knowledgetree Document Management	Version 3.0.0
Knowledgetree Document Management Knowledgetree Document Management	Version 3.0.1
Knowledgetree Document Management Knowledgetree Document Management	Version 3.0.2
Knowledgetree Document Management Knowledgetree Document Management	Version 3.0.3
Knowledgetree Document Management Knowledgetree Document Management	Version 3.0.3a
Knowledgetree Document Management Knowledgetree Document Management	Version 3.0.3b
Knowledgetree Document Management Knowledgetree Document Management	Version 3.1
Knowledgetree Document Management Knowledgetree Document Management	Version 3.1a
Knowledgetree Document Management Knowledgetree Document Management	Version 3.1b
Knowledgetree Document Management Knowledgetree Document Management	Version 3.3.1
Knowledgetree Document Management Knowledgetree Document Management	Version 3.3.2
Knowledgetree Document Management Knowledgetree Document Management	Version 3.3.3
Knowledgetree Document Management Knowledgetree Document Management	Version 3.3.4
Knowledgetree Document Management Knowledgetree Document Management	Version 3.3.5
Knowledgetree Document Management Knowledgetree Document Management	Version 3.3.6
Knowledgetree Document Management Knowledgetree Document Management	Version 3.3.7
Knowledgetree Document Management Knowledgetree Document Management	Version 3.3
Knowledgetree Document Management Knowledgetree Document Management	Version 3.4.1
Knowledgetree Document Management Knowledgetree Document Management	Version 3.4.2
Knowledgetree Document Management Knowledgetree Document Management	Version 3.4.3
Knowledgetree Document Management Knowledgetree Document Management	Version 3.4.4
Knowledgetree Document Management Knowledgetree Document Management	Version 3.4.5
Knowledgetree Document Management Knowledgetree Document Management	Version 3.4.6
Knowledgetree Document Management Knowledgetree Document Management	Version 3.4
Knowledgetree Document Management Knowledgetree Document Management	Version 3.4a
Knowledgetree Document Management Knowledgetree Document Management	Version 3.5.2
Knowledgetree Document Management Knowledgetree Document Management	Version 3.5.2a
Knowledgetree Document Management Knowledgetree Document Management	Version 3.5.2b
Knowledgetree Document Management Knowledgetree Document Management	Version 3.5.2c
Knowledgetree Document Management Knowledgetree Document Management	Version 3.5.3