Approved changes feed: RSS · Atom

cpe:2.3:a:knowledgetree:knowledgetree:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorKnowledgetree (52ae9a3d-58b1-56b1-947d-c0b62f1e7a53)
ProductKnowledgetree (b3b737dd-f6f1-50b6-8dfb-c02af780e6bc)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from purl2cpe mapping

PURL mappings

PURLSourceLast updated
pkg:github/csbde/knowledgetree purl2cpe 2026-06-01 10:18:02.984530
pkg:github/halcyon/knowledgetree purl2cpe 2026-06-01 10:18:02.984533

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2014-2737 vulnerable 2026-06-08 05:05:29.726559 Details available
SQL injection vulnerability in the get_active_session function in the KTAPI_UserSession class in webservice/clienttools/services/mdownload.php in KnowledgeTree 3.7.0.2 and earlier allows remote attackers to execute arbitrary SQL commands via the u parameter, related to the getFileName function.
Published: 2014-04-22T14:00:00.000Z
Updated: 2024-08-06T10:21:36.061Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.