PRODUCT PROFILE

chyrp

暂无产品描述。

关联漏洞

共找到 2 条公开漏洞记录

中危CVE-2011-27802011/07/19

Chyrp 2.x - Local File Inclusion

A directory traversal vulnerability in includes/lib/gz.php in Chyrp 2.0 and earlier allows remote attackers to read arbitrary files via a .. (dot dot) in the file parameter, a different vulnerability than CVE-2011-2744.

chyrpPoC 已收录

CVSS5.0EPSS 2.7%

中危CVE-2011-27442011/07/19

Chyrp 2.x - Local File Inclusion

A directory traversal vulnerability in Chyrp 2.1 and earlier allows remote attackers to include and execute arbitrary local files via a ..%2F (encoded dot dot slash) in the action parameter to the default URI.

chyrpPoC 已收录

CVSS6.8EPSS 7.4%