575 matches found
JVN#28386124: ClipBucket vulnerable to cross-site scripting
Clipbucket is open source video sharing script. ClipBucket contains a cross-site scripting CWE-79 vulnerability. Impact An arbitrary script may be executed on the user's web browser. Solution Update the Software Update to the latest version according to the information provided by the vendor...
Clipbucket 2.8 Blind SQL Injection
Exploit Title : Clipbucket signup.php 2.8 Blind SQL Injection Date : 26/10/2015 Exploit Author : ayadi email : [email protected] Vendor Homepage : http://clip-bucket.com/ Software Link : http://sourceforge.net/projects/clipbucket/files/ClipBucket%20v2/clipbucket-2.8.v3354-stable.zip Versi...
ClipBucket <= 2.6 Multiple SQLi Vulnerabilities - Active Check
ClipBucket is prone to multiple SQL injection SQLi vulnerabilities. SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...
CVE-2012-5849
Multiple SQL injection vulnerabilities in ClipBucket 2.6 Revision 738 and earlier allow remote attackers to execute arbitrary SQL commands via the 1 uid parameter in an addfriend action to ajax.php; id parameter in a 2 shareobject, 3 addtofav, 4 rating, or 5 flagobject action to ajax.php; cid...
Sql injection
Multiple SQL injection vulnerabilities in ClipBucket 2.6 Revision 738 and earlier allow remote attackers to execute arbitrary SQL commands via the 1 uid parameter in an addfriend action to ajax.php; id parameter in a 2 shareobject, 3 addtofav, 4 rating, or 5 flagobject action to ajax.php; cid...
CVE-2012-5849
ClipBucket 2.6 Revision 738 and earlier is affected by multiple SQL injection vulnerabilities. The root cause is improper sanitization of input across several endpoints, notably /ajax.php parameters (uid; id with modes like share_object, add_to_fav, rating, flag_object; cid with add_new_item/remo...
CVE-2012-5849
Multiple SQL injection vulnerabilities in ClipBucket 2.6 Revision 738 and earlier allow remote attackers to execute arbitrary SQL commands via the 1 uid parameter in an addfriend action to ajax.php; id parameter in a 2 shareobject, 3 addtofav, 4 rating, or 5 flagobject action to ajax.php; cid...
CVE-2012-5849: Improper Neutralization of Special Elements used in an SQL Command
Multiple SQL injection vulnerabilities in ClipBucket 2.6 Revision 738 and earlier allow remote attackers to execute arbitrary SQL commands via the 1 uid parameter in an addfriend action to ajax.php; id parameter in a 2 shareobject, 3 addtofav, 4 rating, or 5 flagobject action to ajax.php; cid...
ClipBucket < 2.7.0.5 SQLi Vulnerability - Active Check
ClipBucket is prone to blind SQL injection SQLi vulnerability. SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:oxygenz:clipbucket...
ClipBucket SQL Injection Vulnerability
ClipBucket is open source free video sharing software. ClipBucket 2.7 RC3 SQL injection vulnerability , allowing remote attackers to execute arbitrary SQL commands via project parameters...
CVE-2015-2102
SQL injection vulnerability in viewitem.php in ClipBucket 2.7 RC3 2.7.0.4.v2929-rc3 allows remote attackers to execute arbitrary SQL commands via the item parameter...
Sql injection
SQL injection vulnerability in viewitem.php in ClipBucket 2.7 RC3 2.7.0.4.v2929-rc3 allows remote attackers to execute arbitrary SQL commands via the item parameter...
CVE-2015-2102
SQL injection vulnerability in viewitem.php in ClipBucket 2.7 RC3 2.7.0.4.v2929-rc3 allows remote attackers to execute arbitrary SQL commands via the item parameter...
CVE-2015-2102
CVE-2015-2102 relates to ClipBucket 2.7 RC3 (2.7.0.4.v2929-rc3), where a vulnerability in view_item.php allows an attacker to pass an attacker-controlled value via the item parameter to perform an SQL injection. The issue is described as a remote SQL injection vulnerability that can lead to arbit...
CVE-2015-2102
SQL injection vulnerability in viewitem.php in ClipBucket 2.7 RC3 2.7.0.4.v2929-rc3 allows remote attackers to execute arbitrary SQL commands via the item parameter...
CVE-2015-2102: Improper Neutralization of Special Elements used in an SQL Command
SQL injection vulnerability in viewitem.php in ClipBucket 2.7 RC3 2.7.0.4.v2929-rc3 allows remote attackers to execute arbitrary SQL commands via the item parameter...
Clipbucket 2.7 RC3 0.9 - Blind SQL Injection Vulnerability
Exploit for php platform in category web applications Exploit Title : Clipbucket 2.7 RC3 0.9 Blind SQL Injection Date : 20 February 2015 Exploit Author : CWH Underground Site : www.2600.in.th Vendor Homepage : http://clip-bucket.com/ Software Link :...
Clipbucket 2.7 RC3 0.9 - Blind SQL Injection
Clipbucket 2.7 RC3 0.9 - Blind SQL Injection Exploit Title : Clipbucket 2.7 RC3 0.9 Blind SQL Injection Date : 20 February 2015 Exploit Author : CWH Underground Site : www.2600.in.th Vendor Homepage : http://clip-bucket.com/ Software Link :...
Clipbucket 2.7 RC3 0.9 - Blind SQL Injection
Exploit Title : Clipbucket 2.7 RC3 0.9 Blind SQL Injection Date : 20 February 2015 Exploit Author : CWH Underground Site : www.2600.in.th Vendor Homepage : http://clip-bucket.com/ Software Link : http://sourceforge.net/projects/clipbucket/files/ClipBucket%20v2/clipbucket-2.7.0.4.v2929-rc3.zip...
Clipbucket 2.7.0.4.v2929-rc3 Blind SQL Injection
Exploit Title : Clipbucket 2.7 RC3 0.9 Blind SQL Injection Date : 20 February 2015 Exploit Author : CWH Underground Site : www.2600.in.th Vendor Homepage : http://clip-bucket.com/ Software Link : http://sourceforge.net/projects/clipbucket/files/ClipBucket%20v2/clipbucket-2.7.0.4.v2929-rc3.zip...