CVE-2011-2780: Directory traversal vulnerability in includes/lib/gz.php in Chyrp 2.0 and earlier allows remote attackers t...

Security readout for executives and security teams

CVE-2011-2780 is a file-read weakness in Chyrp 2.0 and earlier. A remote attacker could abuse path traversal handling in includes/lib/gz.php to read files the web server can access. Business impact depends on whether legacy Chyrp is still exposed and whether sensitive configuration or credential files are reachable. Exposure is most likely in legacy public Chyrp deployments at version 2.0 or earlier. The supplied affected CPE data is incomplete, so teams should validate by product inventory, deployed code, and internet-facing route review. Treat as a legacy exposure cleanup item with potentially serious confidentiality impact. Prioritize quickly if Chyrp is internet-facing or stores secrets on the same host, but urgency cannot be scored precisely from the provided sources. Mitigation focus: Identify and retire any Chyrp 2.0 or earlier deployments.; Check vendor or project guidance for the appropriate fixed version or patch.; Restrict public access to affected legacy Chyrp paths until remediated..

Prepared

Jun 27, 2026, 18:09 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.