Cross-site scripting (XSS) vulnerability in default.php in Kipper 2.01 allows remote attackers to inject arbitrary web script or HTML via the charm parameter.
References
Link | Resource |
---|---|
http://secunia.com/advisories/33832 | Vendor Advisory |
http://www.securityfocus.com/bid/33640 | Exploit |
https://www.exploit-db.com/exploits/7993 |
Configurations
Information
Published : 2009-03-05 22:50
Updated : 2017-09-28 18:34
NVD link : CVE-2009-0763
Mitre link : CVE-2009-0763
JSON object : View
CWE
CWE-79
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
Products Affected
bookelves
- kipper