CVE-2025-62429

CVE-2025-62429 PoC - clipbucket RCE Proof-of-Concept for RCE via PHP Code Injection in updatelaunch.php Disclosure: Originally reported by me via GHSA-3h9c-7j8r-xc3v ⚠️ Authorized pentesting/research use only. Vulnerability Information Field| Value ---|--- CVE ID| CVE-2025-62429 Severity| 🔴 High...

CVE-2025-62429

ClipBucket v5 is an open source video sharing platform. Prior to version 5.5.2 147, ClipBucket v5 is vulnerable to arbitrary PHP code execution. In /upload/adminarea/actions/updatelaunch.php, the "type" parameter from a POST request is embedded into PHP tags and executed. Proper sanitization is n...

CVE-2025-62429: Improper Control of Generation of Code

ClipBucket v5 is an open source video sharing platform. Prior to version 5.5.2 147, ClipBucket v5 is vulnerable to arbitrary PHP code execution. In /upload/adminarea/actions/updatelaunch.php, the "type" parameter from a POST request is embedded into PHP tags and executed. Proper sanitization is n...