CVE-2006-2885

Severity: medium (CVSS 4.3 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 1.3% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2006-06-07 · updated 2026-06-16

Description

Multiple cross-site scripting (XSS) vulnerabilities in KnowledgeTree Open Source 3.0.3 and earlier allow remote attackers to inject arbitrary web script or HTML via the (1) fDocumentId parameter in view.php and the (2) fSearchableText parameter in /search/simpleSearch.php.

Affected products

Knowledgetree: 3.0.3

References

http://pridels0.blogspot.com/2006/06/knowledgetree-open-source-xss-vuln.html
http://secunia.com/advisories/20455
http://www.osvdb.org/26179
http://www.osvdb.org/26180
http://www.securityfocus.com/bid/18324
http://www.vupen.com/english/advisories/2006/2157
https://exchange.xforce.ibmcloud.com/vulnerabilities/26940
http://pridels0.blogspot.com/2006/06/knowledgetree-open-source-xss-vuln.html
http://secunia.com/advisories/20455
http://www.osvdb.org/26179
http://www.osvdb.org/26180
http://www.securityfocus.com/bid/18324

Get alerted when CVE-2006-2885 or the next vulnerability affects your stack