CVE-2009-0765

2009-03-0318:00:00

mitre

www.cve.org

AI Score

7.1

Confidence

High

EPSS

0.004

Percentile

75.2%

JSON

Directory traversal vulnerability in index.php in Kipper 2.01 allows remote attackers to include and execute arbitrary local files via a … (dot dot) in the configfile parameter.

References

secunia.com/advisories/33832

www.securityfocus.com/bid/33640

exchange.xforce.ibmcloud.com/vulnerabilities/49271

www.exploit-db.com/exploits/7993