bookelves

Top products

The 5 most recently published vulnerabilities affecting bookelves.

• CVE-2009-0764Multiple cross-site scripting (XSS) vulnerabilities in Kipper 2.01 allow remote attackers to inject arbitrary web script or HTML via the charm parameter to (1) index.php and (2) kipper.php. NOTE: ...4.3Mar 3, 2009
• CVE-2009-0763Cross-site scripting (XSS) vulnerability in default.php in Kipper 2.01 allows remote attackers to inject arbitrary web script or HTML via the charm parameter.4.3Mar 3, 2009
• CVE-2009-0767Kipper 2.01 stores sensitive information under the web root with insufficient access control, which allows remote attackers to download a file containing credentials via a direct request for job/co...5.0Mar 3, 2009
• CVE-2009-0765Directory traversal vulnerability in index.php in Kipper 2.01 allows remote attackers to include and execute arbitrary local files via a .. (dot dot) in the configfile parameter.7.5Mar 3, 2009
• CVE-2009-0766Directory traversal vulnerability in default.php in Kipper 2.01 allows remote attackers to include and execute arbitrary local files via directory traversal sequences in the configfile parameter. ...7.5Mar 3, 2009