Cross site scripting

Multiple cross-site scripting XSS vulnerabilities in ClipBucket 2.7.0.5 allow remote authenticated users to inject arbitrary web script or HTML via 1 the collectiondescription parameter to upload/managecollections.php in an addnew action or the 2 photodescription, 3 phototags, or 4 phototitle...

CVE-2016-1000307

Multiple Cross Site Scripting XSS Vulnerabilities in ClipBucket v2.8.1 and probably prior allow Remote Attackers to inject arbitrary web script or HTML via 1 profiledesc, aboutme, schools, occupation, companies, hobbies, favmovies, favmusic, favbooks parameters to ProfileSettings page; 2 note...

CVE-2016-1000307

Multiple Cross Site Scripting XSS Vulnerabilities in ClipBucket v2.8.1 and probably prior allow Remote Attackers to inject arbitrary web script or HTML via 1 profiledesc, aboutme, schools, occupation, companies, hobbies, favmovies, favmusic, favbooks parameters to ProfileSettings page; 2 note...

CVE-2015-4673

Multiple cross-site scripting XSS vulnerabilities in ClipBucket 2.7.0.5 allow remote authenticated users to inject arbitrary web script or HTML via 1 the collectiondescription parameter to upload/managecollections.php in an addnew action or the 2 photodescription, 3 phototags, or 4 phototitle...

CVE-2016-1000307

CVE-2016-1000307 affects ClipBucket v2.8.1 (and likely earlier) and describes multiple XSS vulnerabilities. An attacker can inject arbitrary web script or HTML via: (1) profile_desc, about_me, schools, occupation, companies, hobbies, fav_movies, fav_music, fav_books on ProfileSettings; (2) note o...

CVE-2016-1000307

Multiple Cross Site Scripting XSS Vulnerabilities in ClipBucket v2.8.1 and probably prior allow Remote Attackers to inject arbitrary web script or HTML via 1 profiledesc, aboutme, schools, occupation, companies, hobbies, favmovies, favmusic, favbooks parameters to ProfileSettings page; 2 note...

CVE-2015-4673

CVE-2015-4673 (ClipBucket) involves multiple XSS vulnerabilities in ClipBucket 2.7.0.5, where authenticated users can inject arbitrary scripts/HTML via (1) collection_description in upload/manage_collections.php (add_new action) and (2) photo_description, (3) photo_tags, or (4) photo_title in upl...

CVE-2016-1000307: Improper Neutralization of Input During Web Page Generation

Multiple Cross Site Scripting XSS Vulnerabilities in ClipBucket v2.8.1 and probably prior allow Remote Attackers to inject arbitrary web script or HTML via 1 profiledesc, aboutme, schools, occupation, companies, hobbies, favmovies, favmusic, favbooks parameters to ProfileSettings page; 2 note...

CVE-2015-4673: Improper Neutralization of Input During Web Page Generation

Multiple cross-site scripting XSS vulnerabilities in ClipBucket 2.7.0.5 allow remote authenticated users to inject arbitrary web script or HTML via 1 the collectiondescription parameter to upload/managecollections.php in an addnew action or the 2 photodescription, 3 phototags, or 4 phototitle...

ClipBucket 2.8.2 Cross Site Scripting

Exploit Title: ClipBucket "promptdocument.cookie https://demo.clipbucket.com /searchresult.php?query=NoGe&type=videos"promptdocument.location https://demo.clipbucket.com /collections.php?cat=all"promptdocument.domain&sort=viewall&time=alltime&page=1&seocatname=All&sorting=sort...

ClipBucket < 2.8.1 XSS Vulnerability

ClipBucket is prone to a cross-site scripting XSS vulnerability. SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

ClipBucket Detection (HTTP)

HTTP based detection of ClipBucket. SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptoid"1.3.6.1.4.1.25623.1.0.809038";...

Cross site scripting

Cross-site scripting XSS vulnerability in ClipBucket before 2.8.1 RC2 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...

CVE-2016-4848

Cross-site scripting XSS vulnerability in ClipBucket before 2.8.1 RC2 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...

CVE-2016-4848

Cross-site scripting XSS vulnerability in ClipBucket before 2.8.1 RC2 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...

CVE-2016-4848

Cross-site scripting XSS vulnerability in ClipBucket before 2.8.1 RC2 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...

CVE-2016-4848

CVE-2016-4848 affects ClipBucket; it is a Cross-Site Scripting (XSS) vulnerability in versions prior to 2.8.1 RC2. The flaw allows remote attackers to inject arbitrary web script or HTML via unspecified vectors, potentially leading to attackers executing scripts in a victim’s browser. Public docu...

CVE-2016-4848: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in ClipBucket before 2.8.1 RC2 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...

ClipBucket cross-site scripting vulnerability (CNVD-2016-06481)

ClipBucket is an open source video sharing software developed by Arslan team. The software allows you to share videos to video sites and supports the lights off effect when watching a movie. ClipBucket suffers from a cross-site scripting vulnerability. Because the program fails to properly filter...

ClipBucket vulnerable to cross-site scripting

Overview Clipbucket is open source video sharing script. ClipBucket contains a cross-site scripting CWE-79 vulnerability. Yoshinori Matsumoto of Kobe Digital Labo, Inc. reported this vulnerability to IPA. JPCERT/CC coordinated with the developer under Information Security Early Warning Partnershi...