102 matches found
PT-2026-30695
Chyrp Lite is an ultra-lightweight blogging engine. Prior to 2026.01, a path traversal vulnerability exists in the administration console that allows an administrator or a user with Change Settings permission to change the uploads path to any folder. This vulnerability allows the user to download...
CVE-2025-69768
SQL Injection vulnerability in Chyrp v.2.5.2 and before allows a remote attacker to obtain sensitive information via the Admin.php component...
EUVD-2025-208757
SQL Injection vulnerability in Chyrp v.2.5.2 and before allows a remote attacker to obtain sensitive information via the Admin.php component...
CVE-2025-69768
SQL Injection vulnerability in Chyrp v.2.5.2 and before allows a remote attacker to obtain sensitive information via the Admin.php component...
CVE-2025-69768
SQL Injection vulnerability in Chyrp v.2.5.2 and before allows a remote attacker to obtain sensitive information via the Admin.php component...
CVE-2025-69768
The provided connected documents confirm a concrete vulnerability in Chyrp: SQL Injection in the Admin.php component affecting Chyrp v2.5.2 and earlier. The root cause is an SQLi flaw in Admin.php that could allow a remote attacker to obtain sensitive information. The CVSS details from the Initia...
PT-2026-25787
SQL Injection vulnerability in Chyrp v.2.5.2 and before allows a remote attacker to obtain sensitive information via the Admin.php component...
Chyrp 安全漏洞
Chyrp is a lightweight blog engine developed by Chyrp OpenSource. Versions of Chyrp 2.5.2 and earlier contained security vulnerabilities. These vulnerabilities stemmed from an SQL injection vulnerability in the Admin.php component, which could allow remote attackers to obtain sensitive informatio...
CVE-2025-69768
SQL Injection vulnerability in Chyrp v.2.5.2 and before allows a remote attacker to obtain sensitive information via the Admin.php component...
CVE-2025-69768
SQL Injection vulnerability in Chyrp v.2.5.2 and before allows a remote attacker to obtain sensitive information via the Admin.php component...
CVE-2025-69768
SQL Injection vulnerability in Chyrp v.2.5.2 and before allows a remote attacker to obtain sensitive information via the Admin.php component...
EUVD-2024-55313
Chyrp 2.5.2 contains a stored cross-site scripting vulnerability that allows authenticated users to inject malicious scripts into post titles. Attackers can craft payloads in the title field that will execute when the post is viewed by other users, potentially stealing session cookies or performi...
CVE-2024-58285
Chyrp 2.5.2 contains a stored cross-site scripting vulnerability that allows authenticated users to inject malicious scripts into post titles. Attackers can craft payloads in the title field that will execute when the post is viewed by other users, potentially stealing session cookies or performi...
CVE-2024-58285 Chyrp 2.5.2 Stored Cross-Site Scripting Vulnerability via Post Title
Chyrp 2.5.2 contains a stored cross-site scripting vulnerability that allows authenticated users to inject malicious scripts into post titles. Attackers can craft payloads in the title field that will execute when the post is viewed by other users, potentially stealing session cookies or performi...
CVE-2024-58285 Chyrp 2.5.2 Stored Cross-Site Scripting Vulnerability via Post Title
Chyrp 2.5.2 contains a stored cross-site scripting vulnerability that allows authenticated users to inject malicious scripts into post titles. Attackers can craft payloads in the title field that will execute when the post is viewed by other users, potentially stealing session cookies or performi...
CVE-2024-58285 Chyrp 2.5.2 Stored Cross-Site Scripting Vulnerability via Post Title
Chyrp 2.5.2 contains a stored cross-site scripting vulnerability that allows authenticated users to inject malicious scripts into post titles. Attackers can craft payloads in the title field that will execute when the post is viewed by other users, potentially stealing session cookies or performi...
Chyrp 跨站脚本漏洞
Chyrp is a lightweight blogging engine. A cross-site scripting vulnerability exists in Chyrp version 2.5.2, which originates from an authenticated user being able to inject malicious script into post titles, potentially leading to a stored cross-site scripting attack...
PT-2025-50534
Name of the Vulnerable Software and Affected Versions Chyrp version 2.5.2 Description An authenticated user can inject malicious scripts into post titles. This is a stored cross-site scripting issue. An attacker can create payloads within the title field that will execute when a post is viewed by...