← Back

Knowledgetree

knowledgetree

4 CVEs • 2 products

Products (2)

Click to collapse
Toggle
Knowledgetree
knowledgetree
3 CVEs
Open Source
open_source
1 CVE

CVEs (4)

CVE
VENDORS
PRODUCTS
UPDATED
PUBLISHED
CVSS
CVE-2014-2737
1Knowledgetree
1Knowledgetree
May 6, 2026
Apr 22, 2014
N/A· v4
N/A· v3
7.5 HIGH· v2
SQL injection vulnerability in the get_active_session function in the KTAPI_UserSession class in webservice/clienttools/services/mdownload.php in KnowledgeTree 3.7.0.2 and earlier allows remote attackers to execute arbit...Show more
SQL injection vulnerability in the get_active_session function in the KTAPI_UserSession class in webservice/clienttools/services/mdownload.php in KnowledgeTree 3.7.0.2 and earlier allows remote attackers to execute arbitrary SQL commands via the u parameter, related to the getFileName function.Show less
CVE-2007-4281
1Knowledgetree
1Open Source
Apr 23, 2026
Aug 9, 2007
N/A· v4
N/A· v3
4.3 MEDIUM· v2
Cross-site scripting (XSS) vulnerability in KnowledgeTree Open Source 3.4 and 3.4.1 allows remote attackers to inject arbitrary web script or HTML via the login field on the login page, and other unspecified vectors.
CVE-2006-2885
1Knowledgetree
1Knowledgetree
Apr 16, 2026
Jun 7, 2006
N/A· v4
N/A· v3
4.3 MEDIUM· v2
Multiple cross-site scripting (XSS) vulnerabilities in KnowledgeTree Open Source 3.0.3 and earlier allow remote attackers to inject arbitrary web script or HTML via the (1) fDocumentId parameter in view.php and the (2) f...Show more
Multiple cross-site scripting (XSS) vulnerabilities in KnowledgeTree Open Source 3.0.3 and earlier allow remote attackers to inject arbitrary web script or HTML via the (1) fDocumentId parameter in view.php and the (2) fSearchableText parameter in /search/simpleSearch.php.Show less
CVE-2006-2443
1Knowledgetree
1Knowledgetree
Apr 16, 2026
May 18, 2006
N/A· v4
N/A· v3
4.6 MEDIUM· v2
The Debian package of knowledgetree 2.0.7 creates environment.php with world-readable permissions, which allows local users to obtain sensitive information such as the username and password for the KnowledgeTree database...Show more
The Debian package of knowledgetree 2.0.7 creates environment.php with world-readable permissions, which allows local users to obtain sensitive information such as the username and password for the KnowledgeTree database.Show less