Chyrp

Chyrp

7 Schwachstellen gefunden.

Hinweis: Diese Liste kann unvollständig sein. Daten werden ohne Gewähr im Ursprungsformat bereitgestellt.
5.4

CVE-2024-58285

Exploit
  • EPSS 0.04%
  • Veröffentlicht 10.12.2025 21:15:16
  • Zuletzt bearbeitet 19.12.2025 17:40:59

Chyrp 2.5.2 contains a stored cross-site scripting vulnerability that allows authenticated users to inject malicious scripts into post titles. Attackers can craft payloads in the title field that will execute when the post is viewed by other users, p...

6.1

CVE-2012-1001

Exploit
  • EPSS 19.24%
  • Veröffentlicht 21.11.2019 22:15:15
  • Zuletzt bearbeitet 21.11.2024 01:36:10

Multiple cross-site scripting (XSS) vulnerabilities in Chyrp before 2.1.2 and before 2.5 Beta 2 allow remote attackers to inject arbitrary web script or HTML via the (1) content parameter to includes/ajax.php or (2) body parameter to includes/error.p...

3.5

CVE-2014-7264

  • EPSS 0.18%
  • Veröffentlicht 11.12.2014 23:59:01
  • Zuletzt bearbeitet 12.04.2025 10:46:40

Multiple cross-site scripting (XSS) vulnerabilities in admin/themes/default/pages/manage_users.twig in the Users Management feature in the admin component in Chyrp before 2.5.1 allow remote authenticated users to inject arbitrary web script or HTML v...

6.5

CVE-2011-2745

Exploit
  • EPSS 2.44%
  • Veröffentlicht 27.07.2011 02:55:02
  • Zuletzt bearbeitet 11.04.2025 00:51:21

upload_handler.php in the swfupload extension in Chyrp 2.0 and earlier relies on client-side JavaScript code to restrict the file extensions of uploaded files, which allows remote authenticated users to upload a .php file, and consequently execute ar...

4.3

CVE-2011-2743

Exploit
  • EPSS 16.5%
  • Veröffentlicht 19.07.2011 21:55:00
  • Zuletzt bearbeitet 11.04.2025 00:51:21

Multiple cross-site scripting (XSS) vulnerabilities in Chyrp 2.1 and earlier allow remote attackers to inject arbitrary web script or HTML via the action parameter to (1) the default URI or (2) includes/javascript.php, or the (3) title or (4) body pa...

5

CVE-2011-2780

Exploit
  • EPSS 3.89%
  • Veröffentlicht 19.07.2011 21:55:00
  • Zuletzt bearbeitet 11.04.2025 00:51:21

Directory traversal vulnerability in includes/lib/gz.php in Chyrp 2.0 and earlier allows remote attackers to read arbitrary files via a .. (dot dot) in the file parameter, a different vulnerability than CVE-2011-2744.

6.8

CVE-2011-2744

Exploit
  • EPSS 1.71%
  • Veröffentlicht 19.07.2011 20:55:01
  • Zuletzt bearbeitet 11.04.2025 00:51:21

Directory traversal vulnerability in Chyrp 2.1 and earlier allows remote attackers to include and execute arbitrary local files via a ..%2F (encoded dot dot slash) in the action parameter to the default URI.