CVE-2011-2744

Directory traversal vulnerability in Chyrp 2.1 and earlier allows remote attackers to include and execute arbitrary local files via a ..%2F (encoded dot dot slash) in the action parameter to the default URI.

• CWE-22

• http://osvdb.org/73890
• http://secunia.com/advisories/45184Vendor Advisory
• http://securityreason.com/securityalert/8312
• http://www.justanotherhacker.com/advisories/JAHx113.txtExploit
• http://www.ocert.org/advisories/ocert-2011-001.html
• http://www.openwall.com/lists/oss-security/2011/07/13/5Exploit
• http://www.openwall.com/lists/oss-security/2011/07/13/6Exploit
• http://www.securityfocus.com/archive/1/518890/100/0/threaded
• http://www.securityfocus.com/bid/48672Exploit
• https://exchange.xforce.ibmcloud.com/vulnerabilities/68564
• http://osvdb.org/73890
• http://secunia.com/advisories/45184Vendor Advisory
• http://securityreason.com/securityalert/8312
• http://www.justanotherhacker.com/advisories/JAHx113.txtExploit
• http://www.ocert.org/advisories/ocert-2011-001.html
• http://www.openwall.com/lists/oss-security/2011/07/13/5Exploit
• http://www.openwall.com/lists/oss-security/2011/07/13/6Exploit
• http://www.securityfocus.com/archive/1/518890/100/0/threaded
• http://www.securityfocus.com/bid/48672Exploit
• https://exchange.xforce.ibmcloud.com/vulnerabilities/68564

Published

Jul 19, 2011

Last Modified

Jun 16, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2011-2738Multiple unspecified vulnerabilities in Cisco Unified Servic…
• CVE-2011-2739The file-blocking feature in EMC Documentum eRoom 7.3.x and …
• CVE-2011-2740EMC RSA Key Manager (RKM) Appliance 2.7 SP1 before 2.7.1.6, …
• CVE-2011-2741EMC RSA Adaptive Authentication On-Premise (AAOP) 6.0.2.1 SP…
• CVE-2011-2742EMC RSA Adaptive Authentication On-Premise (AAOP) 6.0.2.1 SP…
• CVE-2011-2743Multiple cross-site scripting (XSS) vulnerabilities in Chyrp…
• CVE-2011-2745upload_handler.php in the swfupload extension in Chyrp 2.0 a…
• CVE-2011-2746Unspecified vulnerability in Kernel/Modules/AdminPackageMana…
• CVE-2011-2747Google Picasa before 3.6 Build 105.67 does not properly hand…
• CVE-2011-2748The server in ISC DHCP 3.x and 4.x before 4.2.2, 3.1-ESV bef…
• CVE-2011-2749The server in ISC DHCP 3.x and 4.x before 4.2.2, 3.1-ESV bef…
• CVE-2011-2750NFRAgent.exe in Novell File Reporter 1.0.4.2 and earlier all…