CVE-2009-0767
bookelves kipper 2.01 - Unauthenticated Credential Exposure via Direct Request
Title source: llmExploitation Summary
EIP tracks 1 public exploit for CVE-2009-0767. PoCs published by RoMaNcYxHaCkEr.
AI-analyzed exploit summary The exploit demonstrates three vulnerabilities in Kipper 2.01: remote data reading via direct file access, local file inclusion via path traversal, and remote XSS via crafted input. The PoC provides direct URLs to exploit these issues.
Description
Kipper 2.01 stores sensitive information under the web root with insufficient access control, which allows remote attackers to download a file containing credentials via a direct request for job/config.data.
Exploits (1)
The exploit demonstrates three vulnerabilities in Kipper 2.01: remote data reading via direct file access, local file inclusion via path traversal, and remote XSS via crafted input. The PoC provides direct URLs to exploit these issues.