4 matches found
Packet Tide ExpressionEngine Cross-Site Scripting Vulnerability
Packet Tide ExpressionEngine is an open source content management system CMS from Packet Tide, Inc. A cross-site scripting vulnerability exists in Packet Tide ExpressionEngine versions prior to 7.4.11, which stems from a cross-site scripting vulnerability contained in files such as Channels.php,...
CVE-2012-6644
Multiple cross-site scripting XSS vulnerabilities in ClipBucket 2.6 allow remote attackers to inject arbitrary web script or HTML via the 1 cat parameter to channels.php, 2 collections.php, 3 groups.php, or 4 videos.php; 5 query parameter to searchresult.php; or 6 type parameter to...
CVE-2012-6643
Multiple SQL injection vulnerabilities in the updatecounter function in includes/functions.php in ClipBucket 2.6 allow remote attackers to execute arbitrary SQL commands via the time parameter to 1 videos.php or 2 channels.php. NOTE: some of these details are obtained from third party information...
Sql injection
Multiple SQL injection vulnerabilities in the updatecounter function in includes/functions.php in ClipBucket 2.6 allow remote attackers to execute arbitrary SQL commands via the time parameter to 1 videos.php or 2 channels.php. NOTE: some of these details are obtained from third party information...