CVE-2009-0763

Description

Cross-site scripting (XSS) vulnerability in default.php in Kipper 2.01 allows remote attackers to inject arbitrary web script or HTML via the charm parameter.

Affected products

• bookelves / kipper2.01 – 2.01

References

• VENDOR_ADVISORYhttp://secunia.com/advisories/33832
• MISChttp://www.securityfocus.com/bid/33640
• EXPLOIThttps://www.exploit-db.com/exploits/7993