NVD

Id
9508  
Name
CVE-2011-2780  
Description
Directory traversal vulnerability in includes/lib/gz.php in Chyrp 2.0 and earlier allows remote attackers to read arbitrary files via a .. (dot dot) in the file parameter, a different vulnerability than CVE-2011-2744.  
Reject
 
CVSS Version
2  
CVSS Score
5  
Severity
Medium  
CVSS Base Score
5  
CVSS Impact Subscore
2.9  
CVSS Exploit Subscore
10  
CVSS Vector
(AV:N/AC:L/Au:N/C:P/I:N/A:N)  
Pub Date
2017-01-07  
Published
2011-07-19  
Modified Date
2011-09-21  
Seq
2011-2780  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
54332 9508 CVE-2011-2780 8312  View
54333 9508 CVE-2011-2780 http://www.justanotherhacker.com/advisories/JAHx113.txt  View
54334 9508 CVE-2011-2780 http://www.ocert.org/advisories/ocert-2011-001.html  View
54335 9508 CVE-2011-2780 [oss-security] 20110713 [oCERT-2011-001] Chyrp input sanitization errors  View
54336 9508 CVE-2011-2780 [oss-security] 20110713 Re: [oCERT-2011-001] Chyrp input sanitization errors  View
54337 9508 CVE-2011-2780 20110713 [oCERT-2011-001] Chyrp input sanitization errors  View
54338 9508 CVE-2011-2780 48672  View
54339 9508 CVE-2011-2780 chyrp-gz-directory-traversal(68565)  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
34573 JVNDB-2011-004815 Chyrp の includes/lib/gz.php におけるディレクトリトラバーサルの脆弱性 Chyrp の ncludes/lib/gz.php には、ディレクトリトラバーサルの脆弱性が存在します。 CVE-2011-2780 50687 CVE-2011-2780 9508 5 http://jvndb.jvn.jp/ja/contents/2011/JVNDB-2011-004815.html 2011-07-19 2012-03-27 View