Cross-Site Scripting Vulnerabilities in Chyrp Web Publishing System
CVE-2011-2743

Currently unrated

Key Information:

Vendor

Chyrp

Status
Chyrp
Vendor
CVE Published:
19 July 2011

What is CVE-2011-2743?

Multiple cross-site scripting (XSS) vulnerabilities in Chyrp version 2.1 and earlier enable remote attackers to inject arbitrary web scripts or HTML. Exploitation points include the action parameter in the default URI and includes/javascript.php, as well as the title and body parameters in admin/help.php. Without proper input sanitization, these vulnerabilities can allow malicious scripts to execute in the context of an authenticated user's browser, compromising sensitive data and functionality.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.

Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.

Deploy the Patch

References

http://securityreason.com/securityalert/8312
third-party-advisoryx_refsource_SREASON
https://exchange.xforce.ibmcloud.com/vulnerabilities/68563
vdb-entryx_refsource_XF
http://www.justanotherhacker.com/advisories/JAHx113.txt
x_refsource_MISC

EPSS Score

16% chance of being exploited in the next 30 days.

Timeline

  • Vulnerability published

  • Vulnerability Reserved

JSON
.