Vulmon
Recent Vulnerabilities
Research Posts
Trends
Blog
About
Contact
Vulmon Alerts
By Relevance
By Risk Score
By Publish Date
chyrp chyrp vulnerabilities and exploits
(subscribe to this query)
NA
CVE-2011-2744
Directory traversal vulnerability in Chyrp 2.1 and previous versions allows remote malicious users to include and execute arbitrary local files via a ..%2F (encoded dot dot slash) in the action parameter to the default URI.
Chyrp Chyrp
Chyrp Chyrp 2.1
Chyrp Chyrp 2.0
1 EDB exploit
NA
CVE-2011-2743
Multiple cross-site scripting (XSS) vulnerabilities in Chyrp 2.1 and previous versions allow remote malicious users to inject arbitrary web script or HTML via the action parameter to (1) the default URI or (2) includes/javascript.php, or the (3) title or (4) body parameter to adm...
Chyrp Chyrp
Chyrp Chyrp 2.1
Chyrp Chyrp 2.0
2 EDB exploits
6.1
CVSSv3
CVE-2012-1001
Multiple cross-site scripting (XSS) vulnerabilities in Chyrp prior to 2.1.2 and prior to 2.5 Beta 2 allow remote malicious users to inject arbitrary web script or HTML via the (1) content parameter to includes/ajax.php or (2) body parameter to includes/error.php.
Chyrp Chyrp
Chyrp Chyrp 2.5.2
2 EDB exploits
NA
CVE-2014-7264
Multiple cross-site scripting (XSS) vulnerabilities in admin/themes/default/pages/manage_users.twig in the Users Management feature in the admin component in Chyrp prior to 2.5.1 allow remote authenticated users to inject arbitrary web script or HTML via the (1) user.email or (2)...
Chyrp Chyrp
NA
CVE-2011-2745
upload_handler.php in the swfupload extension in Chyrp 2.0 and previous versions relies on client-side JavaScript code to restrict the file extensions of uploaded files, which allows remote authenticated users to upload a .php file, and consequently execute arbitrary PHP code, vi...
Chyrp Chyrp
1 EDB exploit
NA
CVE-2011-2780
Directory traversal vulnerability in includes/lib/gz.php in Chyrp 2.0 and previous versions allows remote malicious users to read arbitrary files via a .. (dot dot) in the file parameter, a different vulnerability than CVE-2011-2744.
Chyrp Chyrp
1 EDB exploit
8.8
CVSSv3
CVE-2017-1000008
Chyrp Lite version 2016.04 is vulnerable to a CSRF in the user settings function allowing malicious users to hijack the authentication of logged in users to modify account information, including their password.
Chyrp-lite Project Chyrp Lite 2016.04
9.8
CVSSv3
CVE-2012-10011
A vulnerability was found in HD FLV PLayer Plugin up to 1.7 on WordPress. It has been rated as critical. Affected by this issue is the function hd_add_media/hd_update_media of the file functions.php. The manipulation of the argument name leads to sql injection. The attack may be ...
Contus Hd Flv Player
CVSSv3
CVSSv2
CVSSv3
VMScore
Recommendations:
CVE-2023-7073
CVE-2024-5496
CVE-2024-5495
XPath injection
bypass
CVE-2024-30043
CVE-2024-24919
denial of service
CVE-2024-35468
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started