CVE-2012-6642

Cross-site scripting XSS vulnerability in ClipBucket 2.6 allows remote attackers to inject arbitrary web script or HTML via the type parameter to viewchannel.php. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information...

CVE-2012-6644

Multiple cross-site scripting XSS vulnerabilities in ClipBucket 2.6 allow remote attackers to inject arbitrary web script or HTML via the 1 cat parameter to channels.php, 2 collections.php, 3 groups.php, or 4 videos.php; 5 query parameter to searchresult.php; or 6 type parameter to...

Sql injection

Multiple SQL injection vulnerabilities in the updatecounter function in includes/functions.php in ClipBucket 2.6 allow remote attackers to execute arbitrary SQL commands via the time parameter to 1 videos.php or 2 channels.php. NOTE: some of these details are obtained from third party information...

Cross site scripting

Cross-site scripting XSS vulnerability in ClipBucket 2.6 allows remote attackers to inject arbitrary web script or HTML via the type parameter to viewchannel.php. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information...

Cross site scripting

Multiple cross-site scripting XSS vulnerabilities in ClipBucket 2.6 allow remote attackers to inject arbitrary web script or HTML via the 1 cat parameter to channels.php, 2 collections.php, 3 groups.php, or 4 videos.php; 5 query parameter to searchresult.php; or 6 type parameter to...

CVE-2012-6644

Multiple cross-site scripting XSS vulnerabilities in ClipBucket 2.6 allow remote attackers to inject arbitrary web script or HTML via the 1 cat parameter to channels.php, 2 collections.php, 3 groups.php, or 4 videos.php; 5 query parameter to searchresult.php; or 6 type parameter to...

CVE-2012-6643

Multiple SQL injection vulnerabilities in the updatecounter function in includes/functions.php in ClipBucket 2.6 allow remote attackers to execute arbitrary SQL commands via the time parameter to 1 videos.php or 2 channels.php. NOTE: some of these details are obtained from third party information...

CVE-2012-6642

The CVE-2012-6642 entry concerns ClipBucket 2.6 with a Cross-site Scripting (XSS) flaw allowing remote attackers to inject arbitrary web script or HTML via the type parameter to view_channel.php. The vulnerability is supported by multiple feeds (NVD, Red Hat advisory, OpenVAS) and is described wi...

CVE-2012-6642

Cross-site scripting XSS vulnerability in ClipBucket 2.6 allows remote attackers to inject arbitrary web script or HTML via the type parameter to viewchannel.php. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information...

CVE-2012-6643

CVE-2012-6643 affects ClipBucket 2.6, where the update_counter function in includes/functions.php is vulnerable to SQL injection. An attacker can pass a crafted time parameter via videos.php or channels.php to cause arbitrary SQL execution. The OpenVAS entry corroborates multiple vulnerabilities ...

CVE-2012-6644

ClipBucket 2.6 is reported to be affected by multiple cross-site scripting (XSS) vulnerabilities. The issue allows remote attackers to inject arbitrary web script or HTML via several parameters across different pages: (1) cat in channels.php, (2) collections.php, (3) groups.php, (4) videos.php, (...

ClipBucket Remote Code Execution Vulnerability

This Metasploit module exploits a vulnerability found in ClipBucket version 2.6 and lower. The script "/adminarea/charts/ofc-library/ofcuploadimage.php" can be used to upload arbitrary code without any authentication. This Metasploit module has been tested on version 2.6 on CentOS 5.9 32-bit. Thi...

ClipBucket Remote Code Execution

This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use. http://metasploit.com/framework/ require 'msf/core' class Metasploit3 "ClipBucket Remote...

ClipBucket 2.6 Multi Exploits(Arbitrary File Uploader and XSS)

Exploit for php platform in category web applications This is private exploit. You can buy it at https://0day.today...

ClipBucket Remote Code Execution

This module exploits a vulnerability found in ClipBucket version 2.6 and lower. The script "/adminarea/charts/ofc-library/ofcuploadimage.php" can be used to upload arbitrary code without any authentication. This module has been tested on version 2.6 on CentOS 5.9 32-bit. Module Options msf use...

ClipBucket Remote Code Execution Vulnerability

ClipBucket suffers from a remote code execution vulnerability that allows for a shell upload. . \ /| | \ \ \ \ | | | | / \ / \ /\ / \ / / / / / \ /\ / \ / / / | | | Y \ / \ | | \ /\ \ \ | | /\ /\ / || || /\ \ /|| / /// \ /|| \ // / / / / / / http://thecrowscrew.org Exploit...

ClipBucket Remote Code Execution

. \ /| | \ \ \ \ | | | | / \ / \ /\ / \ / / / / / \ /\ / \ / / / | | | Y \ / \ | | \ /\ \ \ | | /\ /\ / || || /\ \ /|| / /// \ /|| \ // / / / / / / http://thecrowscrew.org Exploit title : ClipBucket Remote Code Execution Vulnerability Author : Gabby Dork = use ur brain ;...

ClipBucket script SQL Injection / XSS Vulnerabilities

Exploit for php platform in category web applications Exploit Title : SQL Injection and XSS vulnerability in ClipBucket script Date : 01 July 2013 Exploit Author : 3rr0r1046 IndiShell Vendor Homepage : http://clip-bucket.com/ Category : webapps Tested on : Linux Dork : "Forged by ClipBucket"...

ClipBucket V2 full path disclosure Vulnerability

Exploit for php platform in category web applications 1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=0 0 1 1 /' \ /'\ /\ \ /'\ 0 0 /, \ /\/\ \ \ \ \ ,/\ /\ \ 1 1 //\ \ /' \ /\ //\ Exploit database separated by exploit 0 0 // type local, remote, DoS, etc. 1 1 1 0 +...

Clipbucket 2.6 Revision 738 - Multiple SQL Injections

Clipbucket 2.6 Revision 738 - Multiple SQL Injections Advisory ID: HTB23125 Product: ClipBucket Vendor: clip-bucket.com Vulnerable Versions: 2.6 Revision 738 and probably prior Tested Version: 2.6 Revision 738 Vendor Notification: November 7, 2012 Vendor Patch: November 28, 2012 Public Disclosure...