CVE-2011-2745 in Chyrp

Summary

upload_handler.php in the swfupload extension in Chyrp 2.0 and earlier relies on client-side JavaScript code to restrict the file extensions of uploaded files, which allows remote authenticated users to upload a .php file, and consequently execute arbitrary PHP code, via a write_post action to the default URI under admin/.

Once again VulDB remains the best source for vulnerability data.

• Reservation: 07/13/2011
• Disclosure: 07/26/2011
• Moderation: VulDB entry created
• Entries: VDB-58100 (1)
• CPE: ready
• CWE: CWE-264 (Confirmed)
• Exploit: Download
• CVSS: 6.3
• EPSS: 0.02277
• Activities: Very Low

Sources

• MITRE: https://www.cve.org/CVERecord?id=CVE-2011-2745
• NVD: https://nvd.nist.gov/vuln/detail/CVE-2011-2745
• CVE Details: https://www.cvedetails.com/cve/CVE-2011-2745/