knowledgetree kayıtları
knowledgetree üreticisine ait 4 yayımlanmış kayıt.
Araştırmacı profili
- KEV’e giren
- 0 · %0
- Silahlaştırılmış
- 0 · %0
- Pre-auth RCE
- 1
- Düzeltme kaydı olan
- %0
- Yayından KEV’e ortanca
- KEV’e giren kayıt yok
Yıllara göre kayıt
Çubuk: toplam · koyu kısım: CISA KEV.
Saldırı profili
Tüm kayıtlar
4 kayıt| Aksiyon | CVE | Zafiyet | Ciddiyet | KEV | EPSS | Yayın |
|---|---|---|---|---|---|---|
30İzleyin | CVE-2014-2737İstismar yok | SQL injection vulnerability in the get_active_session function in the KTAPI_UserSession class in webservice/clienttools/services/mdownload.pknowledgetree · knowledgetree · CWE-89 | Yüksek7,5 | — | %1,2 | 22 Nis 2014 |
18İzleyin | CVE-2006-2443İstismar yok | The Debian package of knowledgetree 2.0.7 creates environment.php with world-readable permissions, which allows local users to obtain sensitknowledgetree · knowledgetree | Orta4,6 | — | %0,3 | 18 May 2006 |
17İzleyin | CVE-2006-2885İstismar yok | Multiple cross-site scripting (XSS) vulnerabilities in KnowledgeTree Open Source 3.0.3 and earlier allow remote attackers to inject arbitrarknowledgetree · knowledgetree | Orta4,3 | — | %1,3 | 7 Haz 2006 |
17İzleyin | CVE-2007-4281İstismar yok | Cross-site scripting (XSS) vulnerability in KnowledgeTree Open Source 3.4 and 3.4.1 allows remote attackers to inject arbitrary web script oknowledgetree · open source | Orta4,3 | — | %1,3 | 9 Ağu 2007 |
- CVE-2014-273730İzleyin
SQL injection vulnerability in the get_active_session function in the KTAPI_UserSession class in webservice/clienttools/services/mdownload.p
YüksekCVSS 7,5İstismar yokEPSS %1knowledgetree · knowledgetree22 Nis 2014
- CVE-2006-244318İzleyin
The Debian package of knowledgetree 2.0.7 creates environment.php with world-readable permissions, which allows local users to obtain sensit
OrtaCVSS 4,6İstismar yokEPSS %0knowledgetree · knowledgetree18 May 2006
- CVE-2006-288517İzleyin
Multiple cross-site scripting (XSS) vulnerabilities in KnowledgeTree Open Source 3.0.3 and earlier allow remote attackers to inject arbitrar
OrtaCVSS 4,3İstismar yokEPSS %1knowledgetree · knowledgetree7 Haz 2006
- CVE-2007-428117İzleyin
Cross-site scripting (XSS) vulnerability in KnowledgeTree Open Source 3.4 and 3.4.1 allows remote attackers to inject arbitrary web script o
OrtaCVSS 4,3İstismar yokEPSS %1knowledgetree · open source9 Ağu 2007