CVE-2007-4281

Cross-site scripting (XSS) vulnerability in KnowledgeTree Open Source 3.4 and 3.4.1 allows remote attackers to inject arbitrary web script or HTML via the login field on the login page, and other unspecified vectors.

Link	Resource
http://sourceforge.net/forum/forum.php?forum_id=722865
http://sourceforge.net/project/shownotes.php?release_id=530698&group_id=107851
http://support.ktdms.com/browse/KTS-2178
http://secunia.com/advisories/26333	Vendor Advisory
http://www.securityfocus.com/bid/25231
http://osvdb.org/36579
http://www.vupen.com/english/advisories/2007/2812

Configuration 1

cpe:2.3:a:knowledgetree:open_source:3.4:*:*:*:*:*:*:* cpe:2.3:a:knowledgetree:open_source:3.4.1:*:*:*:*:*:*:*

---

Published : 2007-08-09 09:17

Updated : 2011-03-08 02:58

---

NVD link : CVE-2007-4281

Mitre link : CVE-2007-4281

No products.

NVD-CWE-Other