Skip to content

CVE-2009-0763 Cross-site scripting (XSS) vulnerability in default.php in Kipper 2.01 allows remote attackers to inject arbitrary web script or HTML via the charm parameter.

MediumCVSS 4.3 EPSS 1.5% Public exploit
Published
Updated
Exploit status
Public exploit available

Description

Cross-site scripting (XSS) vulnerability in default.php in Kipper 2.01 allows remote attackers to inject arbitrary web script or HTML via the charm parameter.

Affected products

ProductAffected versionsFixed in
bookelves kipper = 2.01 No fix listed

References

  • 33832 third-party-advisory vendor-advisory
  • 33640 exploit vdb-entry
  • 7993 exploit