CVE-2007-4281

medium

Description

Cross-site scripting (XSS) vulnerability in KnowledgeTree Open Source 3.4 and 3.4.1 allows remote attackers to inject arbitrary web script or HTML via the login field on the login page, and other unspecified vectors.

References

http://www.vupen.com/english/advisories/2007/2812

http://www.securityfocus.com/bid/25231

http://support.ktdms.com/browse/KTS-2178

http://sourceforge.net/project/shownotes.php?release_id=530698&group_id=107851

http://sourceforge.net/forum/forum.php?forum_id=722865

http://secunia.com/advisories/26333

http://osvdb.org/36579

Details

Source: Mitre, NVD

Published: 2007-08-09

Updated: 2026-06-16

Risk Information

CVSS v2

Base Score: 4.3

Vector: CVSS2#AV:N/AC:M/Au:N/C:N/I:P/A:N

Severity: Medium

CVSS v3

Base Score: 6.1

Vector: CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N