CVE-2006-2885

概要

参考情報

• pridels0.blogspot.com/2006/06/knowledgetree-open-source-xss-vuln.html
• secunia.com/advisories/20455 · Vendor Advisory
• osvdb.org/26179
• osvdb.org/26180
• securityfocus.com/bid/18324
• vupen.com/english/advisories/2006/2157
• exchange.xforce.ibmcloud.com/vulnerabilities/26940

knowledgetree のその他の脆弱性

• CVE-2014-2737高 7.5SQL injection vulnerability in the get_active_session function in the KTAPI_UserSession class in webservice/clienttools/services/mdownload.p…
• CVE-2006-2443中 4.6The Debian package of knowledgetree 2.0.7 creates environment.php with world-readable permissions, which allows local users to obtain sensit…