0day.today - Biggest Exploit Database in the World.
- We use one main domain: http://0day.today
- Most of the materials is completely FREE
- If you want to purchase the exploit / get V.I.P. access or pay for any other service,
you need to buy or earn
GOLD
Administration of this site uses the official contacts. Beware of impostors!
We DO NOT use Telegram or any messengers / social networks!Please, beware of scammers!
- Read the [ agreement ]
- Read the [ Submit ] rules
- Visit the [ faq ] page
- [ Register ] profile
- Get [ GOLD ]
- If you want to [ sell ]
- If you want to [ buy ]
- If you lost [ Account ]
- Any questions [ admin@0day.today ]
- Authorisation page
- Registration page
- Restore account page
- FAQ page
- Contacts page
- Publishing rules
- Agreement page
Mail:
Facebook:
Twitter:
Telegram:
We DO NOT use Telegram or any messengers / social networks!
Contact us
You can contact us by:
Mail:
Facebook:
Twitter:
Telegram:
We DO NOT use Telegram or any messengers / social networks!
KnowledgeTree Blind SQL Injection Vulnerability
Author
Risk
[Security Risk High
]0day-ID
Category
Date add
CVE
Platform
Product description: ============ KnowledgeTree is document management system that makes it easy to secure, share, track and manage the documents and records. ============ KnowledgeTree Blind SQL Injection (CVE-2014-2737) ============ The application is vulnerable to blind SQL injection which is exploitable through /webservice/clienttools/services/mdownload.php. This issue is exploitable without authentication. Details: ---------------------- The vulnerable code is in the get_active_session function in the KTAPI_UserSession class. In this location the query isn't parameterized when looking up the active session. In the getFileName function an unvalidated 'u' parameter is passed. Exploitable from: /webservice/clienttools/services/mdownload.php POC is withheld. The CVE project assigned CVE-2014-2737 to this issue. Vendor Response: 1. The open source project was shut down, and the vendor doesn’t have a place to post a patch. The vendor does have a patch available that works for the open source project if you ask them. 2. Upgrade to the KnowledgeTree on premise product which is patched against this issue. Timeline: ============ February 25, 2014, Vulnerability identified February 25, 2014, Product vendor notification March 14, 2014, Vendor confirmed the issue March 26, 2014, Vendor fix reviewed March 28, 2014, Vendor fix confirmed March 28, 2014, Vendor has a patch available for the open source product April 20, 2014, Disclosure Research: ============ Craig Arendt, Stratum Security http://www.stratumsecurity.com # 0day.today [2024-12-25] #