CVE-2009-0766 EXPLOIT
7.5
HIGH · CVSS 2.0 · EPSS 2.4% (pctl 83)
Patch early
A public exploit exists.
Description
Directory traversal vulnerability in default.php in Kipper 2.01 allows remote attackers to include and execute arbitrary local files via directory traversal sequences in the configfile parameter. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information.
Scoring
| CVSS | 7.5 (HIGH, v2.0) |
|---|---|
| Vector | AV:N/AC:L/Au:N/C:P/I:P/A:P |
| EPSS | 2.36% — more likely to be exploited than 83% of all CVEs |
| Weakness | CWE-22 |
| On CISA KEV | no |
| Public exploit | yes |
| Published | 2009-03-06 |
| Last modified | 2026-06-16 |
Affected (1)
| Vendor | Product |
|---|---|
| bookelves | kipper |
Public exploits
| Source | Title | Date |
|---|---|---|
| exploit-db | Kipper 2.01 - Cross-Site Scripting / Local File Inclusion / File Disclosure | 2009-02-05 |
→ the Explorer · watch your stack · NVD