CVE-2008-5857

The DropDocuments plugin in KnowledgeTree before 3.5.4a allows remote authenticated users to gain administrative privileges via a certain sequence of "browse documents" and dashboard requests.

Date published : 2009-01-06

http://www.securityfocus.com/bid/32920

http://issues.knowledgetree.com/browse/KTS-3921