Lucene search
+L

5 matches found

NVD
NVD
•added 2026/09/29 3:17 p.m.•13 views

CVE-2026-102569

ClipBucket v5 through 5.5.3-197 contains a time-based blind SQL injection vulnerability in the admin video edit function where the videoid parameter is concatenated into an UPDATE statement without proper escaping. An authenticated administrator with videomoderation permission can inject arbitrar...

7CVSS0.00237EPSS
SaveExploits0References5
Cvelist
Cvelist
•added 2026/09/29 2:22 p.m.•44 views

CVE-2026-102569 ClipBucket v5 through 5.5.3-#197 SQL Injection via videoid Parameter

ClipBucket v5 through 5.5.3-197 contains a time-based blind SQL injection vulnerability in the admin video edit function where the videoid parameter is concatenated into an UPDATE statement without proper escaping. An authenticated administrator with videomoderation permission can inject arbitrar...

7CVSS0.00237EPSS
SaveExploits0References5
CVE
CVE
•added 2026/09/29 2:22 p.m.•17 views

CVE-2026-102569

The ClipBucket application (versions v5 through 5.5.3-#197 ) contains a time-based blind SQL injection vulnerability within the admin video edit function. The root cause is the lack of proper escaping when the videoid parameter is concatenated into an UPDATE statement. An authenticated administra...

7CVSS6AI score0.00237EPSS
SaveExploits0References5
Positive Technologies
Positive Technologies
•added 2026/09/29 12:00 a.m.•9 views

PT-2026-102627

🚨 CVE-2026-102569 ClipBucket v5 through 5.5.3-197 contains a time-based blind SQL injection vulnerability in the admin video edit function where the videoid parameter is concatenated into an UPDATE statement without proper escaping. An authenticated administrator with video moderation permission...

7CVSS6AI score0.00237EPSS
SaveExploits0References7
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/09/29 12:00 a.m.•14 views

CVE-2026-102569: Improper Neutralization of Special Elements used in an SQL Command

ClipBucket v5 through 5.5.3-197 contains a time-based blind SQL injection vulnerability in the admin video edit function where the videoid parameter is concatenated into an UPDATE statement without proper escaping. An authenticated administrator with videomoderation permission can inject arbitrar...

7CVSS6AI score0.00237EPSS
SaveExploits0References2
Rows per page
Query Builder