CVE-2009-0763

Cross-site scripting XSS vulnerability in default.php in Kipper 2.01 allows remote attackers to inject arbitrary web script or HTML via the charm parameter...

CVE-2009-0767

Kipper 2.01 stores sensitive information under the web root with insufficient access control, which allows remote attackers to download a file containing credentials via a direct request for job/config.data...

CVE-2009-0765

Directory traversal vulnerability in index.php in Kipper 2.01 allows remote attackers to include and execute arbitrary local files via a .. dot dot in the configfile parameter...

CVE-2009-0764

Multiple cross-site scripting XSS vulnerabilities in Kipper 2.01 allow remote attackers to inject arbitrary web script or HTML via the charm parameter to 1 index.php and 2 kipper.php. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information...

CVE-2009-0767

CVE-2009-0767 affects Kipper 2.01, where sensitive information is stored under the web root with insufficient access control. This allows remote attackers to download a file containing credentials via a direct request for job/config.data. Impact is exposure of credentials (partial confidentiality...

CVE-2009-0763: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in default.php in Kipper 2.01 allows remote attackers to inject arbitrary web script or HTML via the charm parameter...

CVE-2009-0765: Improper Limitation of a Pathname to a Restricted Directory

Directory traversal vulnerability in index.php in Kipper 2.01 allows remote attackers to include and execute arbitrary local files via a .. dot dot in the configfile parameter...

CVE-2009-0767: Undefined Security Weakness

Kipper 2.01 stores sensitive information under the web root with insufficient access control, which allows remote attackers to download a file containing credentials via a direct request for job/config.data...

CVE-2009-0764: Improper Neutralization of Input During Web Page Generation

Multiple cross-site scripting XSS vulnerabilities in Kipper 2.01 allow remote attackers to inject arbitrary web script or HTML via the charm parameter to 1 index.php and 2 kipper.php. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information...

CVE-2009-0766: Improper Limitation of a Pathname to a Restricted Directory

Directory traversal vulnerability in default.php in Kipper 2.01 allows remote attackers to include and execute arbitrary local files via directory traversal sequences in the configfile parameter. NOTE: the provenance of this information is unknown; the details are obtained solely from third party...

Kipper 2.01 (XSS/LFI/DD) Multiple Vulnerabilities

No description provided by source. Kipper 2.01 Multiple Vulnes Remote Data Reading , Local File Include , Remote XSS Download From : http://www.bookelves.com/kipper/files/kipper20.zip - Found By : RoMaNcYxHaCkEr - My Site : WwW.Sec-Code.CoM - My Group : Security - Codes Group Exploit 1: - Remote...

Kipper 2.01 - Cross-Site Scripting / Local File Inclusion / File Disclosure

Kipper 2.01 Multiple Vulnes Remote Data Reading , Local File Include , Remote XSS Download From : http://www.bookelves.com/kipper/files/kipper20.zip - Found By : RoMaNcYxHaCkEr - My Site : WwW.Sec-Code.CoM - My Group : Security - Codes Group Exploit 1: - Remote Data Reading :...

Kipper 2.01 (XSS/LFI/DD) Multiple Vulnerabilities

Exploit for unknown platform in category web applications ================================================= Kipper 2.01 XSS/LFI/DD Multiple Vulnerabilities ================================================= Kipper 2.01 Multiple Vulnes Remote Data Reading , Local File Include , Remote XSS Download...

Kipper 2.01 XSS / LFI / Disclosure

Kipper 2.01 Multiple Vulnes Remote Data Reading , Local File Include , Remote XSS Download From : http://www.bookelves.com/kipper/files/kipper20.zip - Found By : RoMaNcYxHaCkEr - My Site : WwW.Sec-Code.CoM - My Group : Security - Codes Group Exploit 1: - Remote Data Reading :...

Kipper 2.01 - Cross-Site Scripting Local File Inclusion File Disclosure

Kipper 2.01 - Cross-Site Scripting Local File Inclusion File Disclosure Kipper 2.01 Multiple Vulnes Remote Data Reading , Local File Include , Remote XSS Download From : http://www.bookelves.com/kipper/files/kipper20.zip - Found By : RoMaNcYxHaCkEr - My Site : WwW.Sec-Code.CoM - My Group : Securi...