Skip to content
Noroxi

chyrp records

8 published records for vendor chyrp.

Researcher profile

Entered KEV
0 · 0%
Weaponized
0 · 0%
Pre-auth RCE
1
With a fix record
0%
Median publish → KEV
No record has entered KEV

Records by year

  1. 19
  2. 25
  3. 26

Bar: total · dark part: CISA KEV.

Recurring classes

The weakness classes this vendor ships most often: where to look.

CWE

Attack profile

All records

8 records
  • CVE-2011-2744
    30Monitor

    Directory traversal vulnerability in Chyrp 2.1 and earlier allows remote attackers to include and execute arbitrary local files via a ..%2F

    MediumCVSS 6.8Proof of conceptEPSS 8%

    chyrp · chyrpJul 19, 2011

  • CVE-2025-69768
    30Monitor

    SQL Injection vulnerability in Chyrp v.2.5.2 and before allows a remote attacker to obtain sensitive information via the Admin.php component

    HighCVSS 7.5No exploitEPSS 0%

    chyrp · chyrpMar 16, 2026

  • CVE-2011-2745
    27Monitor

    upload_handler.php in the swfupload extension in Chyrp 2.0 and earlier relies on client-side JavaScript code to restrict the file extensions

    MediumCVSS 6.5Proof of conceptEPSS 2%

    chyrp · chyrpJul 26, 2011

  • CVE-2012-1001
    25Monitor

    Multiple cross-site scripting (XSS) vulnerabilities in Chyrp before 2.1.2 and before 2.5 Beta 2 allow remote attackers to inject arbitrary w

    MediumCVSS 6.1Proof of conceptEPSS 3%

    chyrp · chyrpNov 21, 2019

  • CVE-2011-2780
    24Monitor

    Directory traversal vulnerability in includes/lib/gz.php in Chyrp 2.0 and earlier allows remote attackers to read arbitrary files via a ..

    MediumCVSS 5.0Proof of conceptEPSS 12%

    chyrp · chyrpJul 19, 2011

  • CVE-2024-58285
    21Monitor

    Chyrp 2.5.2 Stored Cross-Site Scripting Vulnerability via Post Title

    MediumCVSS 5.3No exploitEPSS 0%

    chyrp · chyrpDec 10, 2025

  • CVE-2011-2743
    18Monitor

    Multiple cross-site scripting (XSS) vulnerabilities in Chyrp 2.1 and earlier allow remote attackers to inject arbitrary web script or HTML v

    MediumCVSS 4.3Proof of conceptEPSS 2%

    chyrp · chyrpJul 19, 2011

  • CVE-2014-7264
    14Monitor

    Multiple cross-site scripting (XSS) vulnerabilities in admin/themes/default/pages/manage_users.twig in the Users Management feature in the a

    LowCVSS 3.5No exploitEPSS 1%

    chyrp · chyrpDec 11, 2014