CVEvulnerability
CVE-2011-2743
4.3 MEDIUM
Official page ↗
- Status
- Modified
- Published
- 2011-07-19
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 4.3 MEDIUM — AV:N/AC:M/Au:N/C:N/I:P/A:N
- Weaknesses
- CWE-79
Description
Multiple cross-site scripting (XSS) vulnerabilities in Chyrp 2.1 and earlier allow remote attackers to inject arbitrary web script or HTML via the action parameter to (1) the default URI or (2) includes/javascript.php, or the (3) title or (4) body parameter to admin/help.php.
Affected configurations
• chyrp chyrp (<= 2.1)
• chyrp chyrp 2.0
• chyrp chyrp 2.1
Related
Weakness · CWE (1)
- CWE-79 Improper Neutralization of Input During Web Page Generation weakness
References
- http://osvdb.org/73887 osvdb.org
- http://osvdb.org/73888 osvdb.org
- http://osvdb.org/73889 osvdb.org
- http://secunia.com/advisories/45184 Vendor Advisory
- http://securityreason.com/securityalert/8312 securityreason.com
- http://www.justanotherhacker.com/advisories/JAHx113.txt Exploit
- http://www.ocert.org/advisories/ocert-2011-001.html www.ocert.org
- http://www.securityfocus.com/archive/1/518890/100/0/threaded www.securityfocus.com
- http://www.securityfocus.com/bid/48672 Exploit
- https://exchange.xforce.ibmcloud.com/vulnerabilities/68563 exchange.xforce.ibmcloud.com
- http://osvdb.org/73887 osvdb.org
- http://osvdb.org/73888 osvdb.org
- http://osvdb.org/73889 osvdb.org
- http://secunia.com/advisories/45184 Vendor Advisory
- http://securityreason.com/securityalert/8312 securityreason.com
- http://www.justanotherhacker.com/advisories/JAHx113.txt Exploit
- http://www.ocert.org/advisories/ocert-2011-001.html www.ocert.org
- http://www.securityfocus.com/archive/1/518890/100/0/threaded www.securityfocus.com
- http://www.securityfocus.com/bid/48672 Exploit
- https://exchange.xforce.ibmcloud.com/vulnerabilities/68563 exchange.xforce.ibmcloud.com