CVE-2011-2744

Directory traversal vulnerability in Chyrp 2.1 and earlier allows remote attackers to include and execute arbitrary local files via a ..%2F encoded dot dot slash in the action parameter to the default URI...

CVE-2011-2744

CVE-2011-2744 is a directory traversal vulnerability in Chyrp 2.1 and earlier. The flaw allows remote attackers to include and execute local files via a encoded ../ in the action parameter to the default URI. The NVD entry lists a CVSS v2 base score of 6.8 (MEDIUM) with network access, requiring ...