Lucene search
+L

575 matches found

securityvulns
securityvulns
•added 2014/10/15 12:00 a.m.•72 views

ClipBucket CMS Xss Vulnerability

Xss Vulnerability In ClipBucket CMS @@@ @@@@@@@@@@@ @@@@@ @@@@@@@@@@ @@@ @@@@@@@ @@@ @@@@@@@@@@@ @@@ @@ @@@ @@ @@@ @@@@@@@@ @@@ @@@ @@@ @@ @@@ @@ @@@ @@@ @@@ @@@ @@@ @@@ @@ @@@ @@ @@@ @@@ @@@ @@@ @@@@@@@@@@@ @@@ @ @@@@@@@@@@ @@@ @@@@@@ @@@ @@@@@@@@@@@ @@@ @@ @@@ @@ @@@ @@@@@@ @@@ @@@ @@@ @@ @@@ @...

SaveExploits0
seebug.org
seebug.org
•added 2014/07/01 12:00 a.m.•32 views

Clipbucket 2.4 RC2 645 SQL Injection Vulnerability

No description provided by source. ------------------------------------------------------------------------ Software................Clipbucket 2.4 RC2 645 Vulnerability...........SQL Injection Threat Level............Critical 4/5 Download................http://www.clip-bucket.com/ Discovery...

7.1AI score
SaveExploits0
seebug.org
seebug.org
•added 2014/07/01 12:00 a.m.•13 views

ClipBucket 1.7 'dwnld.php' Directory Traversal Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/33781/info ClipBucket is prone to a directory-traversal vulnerability because it fails to sufficiently sanitize user-supplied input data. Exploiting the issue may allow an attacker to obtain sensitive information that cou...

7.1AI score
SaveExploits0
seebug.org
seebug.org
•added 2014/07/01 12:00 a.m.•67 views

Clipbucket 2.5 - Directory Traversal

No description provided by source. Author: loneferret of Offensive Security Product: ClipBucket Version: 2.5 and maybe older versions Vendor Site: http://clip-bucket.com/ Software Download: http://sourceforge.net/projects/clipbucket/ Software description: ClipBucket is an OpenSource Multimedia...

7.1AI score
SaveExploits0
seebug.org
seebug.org
•added 2014/07/01 12:00 a.m.•16 views

ClipBucket 2.5 CSRF Vulnerability

No description provided by source. Exploit Title: ClipBucket 2.5 CSRF Vulnerability Author: DaOne LCA Date: 15/8/2012 Software Link: http://clip-bucket.com/ Or: http://sourceforge.net/projects/clipbucket/ CSRF Add Admin html body onload=document.form0.submit; form method=POST name=form0...

7.1AI score
SaveExploits0
seebug.org
seebug.org
•added 2014/07/01 12:00 a.m.•16 views

ClipBucket 2.6 Revision 738 Multiple SQL Injection Vulnerabilities

No description provided by source...

7.1AI score
SaveExploits0
seebug.org
seebug.org
•added 2014/07/01 12:00 a.m.•20 views

Clipbucket 2.5 - Blind SQLi Vulnerability

No description provided by source. Author: loneferret of Offensive Security Product: ClipBucket Version: 2.5 and maybe older versions Vendor Site: http://clip-bucket.com/ Software Download: http://sourceforge.net/projects/clipbucket/ Software description: ClipBucket is an OpenSource Multimedia...

7.1AI score
SaveExploits0
OpenVAS
OpenVAS
•added 2014/06/18 12:00 a.m.•33 views

ClipBucket < 2.7 XSS Vulnerability - Active Check

ClipBucket is prone to a cross-site scripting XSS vulnerability. SPDX-FileCopyrightText: 2014 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

4.3CVSS4.9AI score0.01423EPSS
SaveExploits0References3
NVD
NVD
•added 2014/06/17 2:55 p.m.•23 views

CVE-2014-4187

Cross-site scripting XSS vulnerability in signup.php in ClipBucket allows remote attackers to inject arbitrary web script or HTML via the Username field...

4.3CVSS5.7AI score0.01423EPSS
SaveExploits0References2
Prion
Prion
•added 2014/06/17 2:55 p.m.•22 views

Cross site scripting

Cross-site scripting XSS vulnerability in signup.php in ClipBucket allows remote attackers to inject arbitrary web script or HTML via the Username field...

4.3CVSS6.1AI score0.01423EPSS
SaveExploits0References2
Cvelist
Cvelist
•added 2014/06/17 2:00 p.m.•30 views

CVE-2014-4187

Cross-site scripting XSS vulnerability in signup.php in ClipBucket allows remote attackers to inject arbitrary web script or HTML via the Username field...

5.7AI score0.01423EPSS
SaveExploits0References2
CVE
CVE
•added 2014/06/17 2:00 p.m.•64 views

CVE-2014-4187

CVE-2014-4187 affects ClipBucket: a cross-site scripting (XSS) vulnerability in signup.php, exploitable via the Username field. The underlying issue is improper input handling in the user signup flow, allowing injected scripts/HTML to be executed in the context of affected sessions. The OpenVAS e...

4.3CVSS5.9AI score0.01423EPSS
SaveExploits0References2Affected Software1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2014/06/17 12:00 a.m.•3 views

CVE-2014-4187: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in signup.php in ClipBucket allows remote attackers to inject arbitrary web script or HTML via the Username field...

4.3CVSS6AI score0.01423EPSS
SaveExploits0References2
Packet Storm
Packet Storm
•added 2014/06/14 12:00 a.m.•20 views

ClipBucket CMS Cross Site Scripting

@@@ @@@@@@@@@@@ @@@@@ @@@@@@@@@@ @@@ @@@@@@@ @@@ @@@@@@@@@@@ @@@ @@ @@@ @@ @@@ @@@@@@@@ @@@ @@@ @@@ @@ @@@ @@ @@@ @@@ @@@ @@@ @@@ @@@ @@ @@@ @@ @@@ @@@ @@@ @@@ @@@@@@@@@@@ @@@ @ @@@@@@@@@@ @@@ @@@@@@ @@@ @@@@@@@@@@@ @@@ @@ @@@ @@ @@@ @@@@@@ @@@ @@@ @@@ @@ @@@ @@ @@@ @@@ @@@ @@@ @@@ @@@ @@@ @@ @@@...

7.4AI score
SaveExploits0
OpenVAS
OpenVAS
•added 2014/04/18 12:00 a.m.•28 views

ClipBucket <= 2.6 Multiple Vulnerabilities - Active Check

ClipBucket is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2014 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:oxygenz:clipbucket"; ifdescripti...

4.3CVSS5.2AI score0.00939EPSS
SaveExploits0References2
NVD
NVD
•added 2014/04/08 2:22 p.m.•28 views

CVE-2012-6643

Multiple SQL injection vulnerabilities in the updatecounter function in includes/functions.php in ClipBucket 2.6 allow remote attackers to execute arbitrary SQL commands via the time parameter to 1 videos.php or 2 channels.php. NOTE: some of these details are obtained from third party information...

7.5CVSS8.5AI score0.01558EPSS
SaveExploits2References6
NVD
NVD
•added 2014/04/08 2:22 p.m.•18 views

CVE-2012-6642

Cross-site scripting XSS vulnerability in ClipBucket 2.6 allows remote attackers to inject arbitrary web script or HTML via the type parameter to viewchannel.php. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information...

4.3CVSS5.6AI score0.00939EPSS
SaveExploits0References2
NVD
NVD
•added 2014/04/08 2:22 p.m.•22 views

CVE-2012-6644

Multiple cross-site scripting XSS vulnerabilities in ClipBucket 2.6 allow remote attackers to inject arbitrary web script or HTML via the 1 cat parameter to channels.php, 2 collections.php, 3 groups.php, or 4 videos.php; 5 query parameter to searchresult.php; or 6 type parameter to...

4.3CVSS5.8AI score0.03204EPSS
SaveExploits8References13
Prion
Prion
•added 2014/04/08 2:22 p.m.•21 views

Sql injection

Multiple SQL injection vulnerabilities in the updatecounter function in includes/functions.php in ClipBucket 2.6 allow remote attackers to execute arbitrary SQL commands via the time parameter to 1 videos.php or 2 channels.php. NOTE: some of these details are obtained from third party information...

7.5CVSS9.2AI score0.01558EPSS
SaveExploits2References6Affected Software1
Prion
Prion
•added 2014/04/08 2:22 p.m.•21 views

Cross site scripting

Cross-site scripting XSS vulnerability in ClipBucket 2.6 allows remote attackers to inject arbitrary web script or HTML via the type parameter to viewchannel.php. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information...

4.3CVSS6AI score0.00939EPSS
SaveExploits0References2Affected Software1
Rows per page
Query Builder