Approved changes feed: RSS · Atom

cpe:2.3:a:chyrp:chyrp:2.1:beta2:*:*:*:*:*:*

part: a version: 2.1 update: beta2

VendorChyrp (455628a9-f1fe-55d3-af96-59eb4d920593)
ProductChyrp (931886ac-2324-5f0d-a2f4-d2dbb5f72834)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*

Notes

Imported from purl2cpe mapping

PURL mappings

PURLSourceLast updated
pkg:github/chyrp/chyrp purl2cpe 2026-06-01 10:15:33.271327

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2011-2744 vulnerable 2026-06-08 04:58:08.994611 Details available
Directory traversal vulnerability in Chyrp 2.1 and earlier allows remote attackers to include and execute arbitrary local files via a ..%2F (encoded dot dot slash) in the action parameter to the default URI.
Published: 2011-07-19T20:00:00.000Z
Updated: 2024-08-06T23:08:23.805Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2011-2743 vulnerable 2026-06-08 04:58:08.993282 Details available
Multiple cross-site scripting (XSS) vulnerabilities in Chyrp 2.1 and earlier allow remote attackers to inject arbitrary web script or HTML via the action parameter to (1) the default URI or (2) includes/javascript.php, or the (3) title or (4) body parameter to admin/help.php.
Published: 2011-07-19T21:00:00.000Z
Updated: 2024-08-06T23:08:23.892Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.

Inspect record JSON

Open JSON directly

Open this panel to browse, search, copy or download the JSON record.