Sql injection

Multiple SQL injection vulnerabilities in the updatecounter function in includes/functions.php in ClipBucket 2.6 allow remote attackers to execute arbitrary SQL commands via the time parameter to 1 videos.php or 2 channels.php. NOTE: some of these details are obtained from third party information...

CVE-2012-6643

CVE-2012-6643 affects ClipBucket 2.6, where the update_counter function in includes/functions.php is vulnerable to SQL injection. An attacker can pass a crafted time parameter via videos.php or channels.php to cause arbitrary SQL execution. The OpenVAS entry corroborates multiple vulnerabilities ...