CVE

Id
50692  
CVE No.
CVE-2011-2780  
Status
Candidate  
Description
Directory traversal vulnerability in includes/lib/gz.php in Chyrp 2.0 and earlier allows remote attackers to read arbitrary files via a .. (dot dot) in the file parameter, a different vulnerability than CVE-2011-2744.  
Phase
Assigned (20110719)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
547309 50692 CVE-2011-2780 BUGTRAQ:20110713 [oCERT-2011-001] Chyrp input sanitization errors  View
547310 50692 CVE-2011-2780 URL:http://www.securityfocus.com/archive/1/archive/1/518890/100/0/threaded  View
547311 50692 CVE-2011-2780 MLIST:[oss-security] 20110713 Re: [oCERT-2011-001] Chyrp input sanitization errors  View
547312 50692 CVE-2011-2780 URL:http://www.openwall.com/lists/oss-security/2011/07/13/6  View
547313 50692 CVE-2011-2780 MLIST:[oss-security] 20110713 [oCERT-2011-001] Chyrp input sanitization errors  View
547314 50692 CVE-2011-2780 URL:http://www.openwall.com/lists/oss-security/2011/07/13/5  View
547315 50692 CVE-2011-2780 MISC:http://www.justanotherhacker.com/advisories/JAHx113.txt  View
547316 50692 CVE-2011-2780 MISC:http://www.ocert.org/advisories/ocert-2011-001.html  View
547317 50692 CVE-2011-2780 BID:48672  View
547318 50692 CVE-2011-2780 URL:http://www.securityfocus.com/bid/48672  View
547319 50692 CVE-2011-2780 OSVDB:73891  View
547320 50692 CVE-2011-2780 URL:http://osvdb.org/73891  View
547321 50692 CVE-2011-2780 SECUNIA:45184  View
547322 50692 CVE-2011-2780 URL:http://secunia.com/advisories/45184  View
547323 50692 CVE-2011-2780 SREASON:8312  View
547324 50692 CVE-2011-2780 URL:http://securityreason.com/securityalert/8312  View
547325 50692 CVE-2011-2780 XF:chyrp-gz-directory-traversal(68565)  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
32717 JVNDB-2011-002957 Google Chrome の拡張機能の実装における詳細不明な脆弱性 Google Chrome の拡張機能の実装は、ホームページの URL を適切に検証しないため、詳細不明な影響を受ける脆弱性が存在します。 CVE-2011-2785 50692 4.3 http://jvndb.jvn.jp/ja/contents/2011/JVNDB-2011-002957.html  View