Bookelves

Records5All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical0CVSS 9.0–10.0

CVSS high2CVSS 7.0–8.9

Exploited now

Bookelves records in CISA KEV

No Bookelves vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Kipper 5 records LOW

Records

5 records

TI-2009-00731 CVE-2009-0766 · GHSA-2w2q-4rr5-39fw

Directory traversal vulnerability in default.php in Kipper 2.01 allows remote attackers…

LOW 37

Directory traversal vulnerability in default.php in Kipper 2.01 allows remote attackers to include and execute arbitrary local files via directory traversal sequences in the configfile parameter.

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.02359 Published 2009-03-03 No fix listed CWE-22

TI-2009-00730 CVE-2009-0765 · GHSA-q946-j8q9-vv2q

Directory traversal vulnerability in index.php in Kipper 2.01 allows remote attackers to…

LOW 37

Directory traversal vulnerability in index.php in Kipper 2.01 allows remote attackers to include and execute arbitrary local files via a ..

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.02347 Published 2009-03-03 No fix listed CWE-22

TI-2009-00732 CVE-2009-0767 · GHSA-vx9q-r464-6v8x

Kipper 2.01 stores sensitive information under the web root with insufficient access…

LOW 27

Kipper 2.01 stores sensitive information under the web root with insufficient access control, which allows remote attackers to download a file containing credentials via a direct request for job/config.data.

CVSS 2.0MEDIUM 5.0 Network No auth Interaction — EPSS 0.02329 Published 2009-03-03 No fix listed CWE-264

TI-2009-00728 CVE-2009-0763 · GHSA-6r84-xg63-3468

Cross-site scripting (XSS) vulnerability in default.php in Kipper 2.01 allows remote…

LOW 23

Cross-site scripting (XSS) vulnerability in default.php in Kipper 2.01 allows remote attackers to inject arbitrary web script or HTML via the charm parameter.

CVSS 2.0MEDIUM 4.3 Network No auth Interaction — EPSS 0.01484 Published 2009-03-03 No fix listed CWE-79

TI-2009-00729 CVE-2009-0764 · GHSA-8mg6-gv3c-64f4

Multiple cross-site scripting (XSS) vulnerabilities in Kipper 2.01 allow remote attackers…

LOW 22

Multiple cross-site scripting (XSS) vulnerabilities in Kipper 2.01 allow remote attackers to inject arbitrary web script or HTML via the charm parameter to (1) index.php and (2) kipper.php.

CVSS 2.0MEDIUM 4.3 Network No auth Interaction — EPSS 0.01204 Published 2009-03-03 No fix listed CWE-79

Open these records in search →

Critical	0
High	2
Medium	3
Low	0
No CVSS	0