https://www.icyphoenix.com/viewtopic.php?f=35&t=4907&p=33226#p33226
-----------------------------------
New Player
Fri 17 Oct, 2008 10:28

Re: Injection Vulnerability
-----------------------------------
[quote user="Scott" post="33210"][quote user="New Player" post="33208"]when comments are activated, the knowledge base generate a topic for comments to the article in the forum that specified is in the category settings
equal what permissions the forum has[/quote]

So you are saying that the knowledge base is basically a random topic generator that displays information you have added into the knowledge base?  So it will generate a topic even if you have not added any infomation into the KB?


If that is right, then yea that needs disabled initially.[/quote]
not random
the knowledge base generate a topic for each article (in this case for the test article) in the knowledge base when comments are active.
when you call a article in the kb, the kb check if exist a topic or not for the article you called (assumed comments are active and this is the default attitude)....for the topic poster enter the kb the name of the person who called the article (in this case you)

delete the test category or disbale the comments and you won't have another topic ;)

[quote user="Chaotic" post="33211"]From what I've read around here, the KB is kinda "iffy."  I would just disable the KB.[/quote]

the original version is a big security hole, yes, but i think mg have fix many or all issues


