CH
Vendor
chyrp
8
CVEs
0
On KEV
0
New 30D
Products
Recent CVEs
| CVE | Product | CVSS | Published | Summary |
|---|---|---|---|---|
| CVE-2025-69768 | CH Chyrp Chyrp | 7.5 | Mar 16 | SQL Injection vulnerability in Chyrp v.2.5.2 and before allows a remote attacker to obtain sensitive information via the Admin.php component |
| CVE-2024-58285 | CH Chyrp chyrp | 5.4 | Dec 10 | Chyrp 2.5.2 Stored Cross-Site Scripting Vulnerability via Post Title |
| CVE-2012-1001 | CH Chyrp Chyrp | 6.1 | Nov 21 | Multiple cross-site scripting (XSS) vulnerabilities in Chyrp before 2.1.2 and before 2.5 Beta 2 allow remote attackers to inject arbitrary web script or HTML via the (1) content… |
| CVE-2014-7264 | CH Chyrp Chyrp | – | Dec 11 | Multiple cross-site scripting (XSS) vulnerabilities in admin/themes/default/pages/manage_users.twig in the Users Management feature in the admin component in Chyrp before 2.5.1… |
| CVE-2011-2745 | CH Chyrp Chyrp | – | Jul 27 | upload_handler.php in the swfupload extension in Chyrp 2.0 and earlier relies on client-side JavaScript code to restrict the file extensions of uploaded files, which allows remote… |
| CVE-2011-2780 | CH Chyrp Chyrp | – | Jul 19 | Directory traversal vulnerability in includes/lib/gz.php in Chyrp 2.0 and earlier allows remote attackers to read arbitrary files via a |
| CVE-2011-2743 | CH Chyrp Chyrp | – | Jul 19 | Multiple cross-site scripting (XSS) vulnerabilities in Chyrp 2.1 and earlier allow remote attackers to inject arbitrary web script or HTML via the action parameter to (1) the… |
| CVE-2011-2744 | CH Chyrp Chyrp | – | Jul 19 | Directory traversal vulnerability in Chyrp 2.1 and earlier allows remote attackers to include and execute arbitrary local files via a ..%2F (encoded dot dot slash) in the action… |