Approved changes feed: RSS · Atom
cpe:2.3:a:chyrp:chyrp:*:*:*:*:*:*:*:*part: a version: * update: *
| Vendor | Chyrp (455628a9-f1fe-55d3-af96-59eb4d920593) |
|---|---|
| Product | Chyrp (931886ac-2324-5f0d-a2f4-d2dbb5f72834) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
Notes
Imported from purl2cpe mapping
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
pkg:github/chyrp/chyrp |
purl2cpe | 2026-06-01 10:15:33.267322 |
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2025-69768 |
vulnerable | 2026-06-08 07:43:13.877271 |
Details available
SQL Injection vulnerability in Chyrp v.2.5.2 and before allows a remote attacker to obtain sensitive information via the Admin.php component
Published: 2026-03-16T00:00:00.000Z
Updated: 2026-03-16T18:58:26.256Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-58285 |
vulnerable | 2026-06-08 06:56:14.356957 |
Chyrp 2.5.2 Stored Cross-Site Scripting Vulnerability via Post Title
Chyrp 2.5.2 contains a stored cross-site scripting vulnerability that allows authenticated users to inject malicious scripts into post titles. Attackers can craft payloads in the title field that will execute when the post is viewed by other users, potentially stealing session cookies or performing client-side attacks.
Published: 2025-12-10T21:15:16.334Z
Updated: 2026-03-05T12:03:33.851Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2014-7264 |
vulnerable | 2026-06-08 05:05:59.188066 |
Details available
Multiple cross-site scripting (XSS) vulnerabilities in admin/themes/default/pages/manage_users.twig in the Users Management feature in the admin component in Chyrp before 2.5.1 allow remote authenticated users to inject arbitrary web script or HTML via the (1) user.email or (2) user.website field in a user registration.
Published: 2014-12-11T23:00:00.000Z
Updated: 2024-08-06T12:47:32.392Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2012-1001 |
vulnerable | 2026-06-08 05:00:46.945591 |
Details available
Multiple cross-site scripting (XSS) vulnerabilities in Chyrp before 2.1.2 and before 2.5 Beta 2 allow remote attackers to inject arbitrary web script or HTML via the (1) content parameter to includes/ajax.php or (2) body parameter to includes/error.php.
Published: 2019-11-21T21:54:40.000Z
Updated: 2024-08-06T18:45:26.456Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2011-2780 |
vulnerable | 2026-06-08 04:58:09.271052 |
Details available
Directory traversal vulnerability in includes/lib/gz.php in Chyrp 2.0 and earlier allows remote attackers to read arbitrary files via a .. (dot dot) in the file parameter, a different vulnerability than CVE-2011-2744.
Published: 2011-07-19T21:00:00.000Z
Updated: 2024-08-06T23:15:31.036Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2011-2745 |
vulnerable | 2026-06-08 04:58:08.994988 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2011-2744 |
vulnerable | 2026-06-08 04:58:08.994547 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2011-2743 |
vulnerable | 2026-06-08 04:58:08.990785 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.
Inspect record JSON
Open this panel to browse, search, copy or download the JSON record.