PT-2009-3374 · Kipper · Kipper

Romancyxhacker · Publicado 2009-03-03 · Atualizado 2017-09-29 · CVE-2009-0763

Positive Technologies (AI Summary)

CVSS v2.0

4.3

Média

Vetor base

AV:N/AC:M/Au:N/C:N/I:P/A:N

Name of the Vulnerable Software and Affected Versions Kipper version 2.01

Description A cross-site scripting (XSS) issue allows remote attackers to inject arbitrary web script or HTML via the charm parameter in the default.php file.

Recommendations For Kipper version 2.01, avoid using the charm parameter in the default.php file until a fix is available. As a temporary workaround, consider validating and sanitizing user input for the charm parameter to minimize the risk of exploitation.

Exploit

Correção

XSS

Enumeração de Fraquezas

CWE-79

Identificadores relacionados

CVE-2009-0763

Produtos afetados

Kipper

Referências · 4

• 🔥 http://securityfocus.com/bid/33640 · Exploit
• 🔥 https://exploit-db.com/exploits/7993 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2009-0763 · Nota de Segurança
• http://secunia.com/advisories/33832 · Aviso do Fabricante