Clip-Bucket

14 CVEs across 1 Clip-Bucket products. Browse Clip-Bucket vulnerabilities, severities, and proof-of-concept exploits.

Clip-Bucket products with known CVEs

ProductCVEs
Clipbucket14
Clip-Bucket CVEs — newest first
CVESeverityScorePublishedSummary
CVE-2013-10040Critical9.82025-07-31ClipBucket version 2.6 and earlier contains a critical vulnerability in the ofc_upload_image.php script located at /admin_area/charts/ofc-library/. This endpoi…
CVE-2018-7666Critical9.82018-03-05An issue was discovered in ClipBucket before 4.0.0 Release 4902. SQL injection vulnerabilities exist in the actions/vote_channel.php channelId parameter, the a…
CVE-2018-7665Critical9.82018-03-05An issue was discovered in ClipBucket before 4.0.0 Release 4902. A malicious file can be uploaded via the name parameter to actions/beats_uploader.php or actio…
CVE-2018-7664Critical9.82018-03-05An issue was discovered in ClipBucket before 4.0.0 Release 4902. Any OS commands can be injected via shell metacharacters in the file_name parameter to /api/fi…
CVE-2016-1000307Medium6.12017-04-06Multiple Cross Site Scripting (XSS) Vulnerabilities in ClipBucket v2.8.1 and probably prior allow Remote Attackers to inject arbitrary web script or HTML via (…
CVE-2015-4673Medium5.42017-04-06Multiple cross-site scripting (XSS) vulnerabilities in ClipBucket 2.7.0.5 allow remote authenticated users to inject arbitrary web script or HTML via (1) the c…
CVE-2016-4848Medium6.12016-09-02Cross-site scripting (XSS) vulnerability in ClipBucket before 2.8.1 RC2 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.
CVE-2012-58492015-05-14Multiple SQL injection vulnerabilities in ClipBucket 2.6 Revision 738 and earlier allow remote attackers to execute arbitrary SQL commands via the (1) uid para…
CVE-2015-21022015-02-27SQL injection vulnerability in view_item.php in ClipBucket 2.7 RC3 (2.7.0.4.v2929-rc3) allows remote attackers to execute arbitrary SQL commands via the item p…
CVE-2014-41872014-06-17Cross-site scripting (XSS) vulnerability in signup.php in ClipBucket allows remote attackers to inject arbitrary web script or HTML via the Username field.
CVE-2012-66442014-04-08Multiple cross-site scripting (XSS) vulnerabilities in ClipBucket 2.6 allow remote attackers to inject arbitrary web script or HTML via the (1) cat parameter t…
CVE-2012-66432014-04-08Multiple SQL injection vulnerabilities in the update_counter function in includes/functions.php in ClipBucket 2.6 allow remote attackers to execute arbitrary S…
CVE-2012-66422014-04-08Cross-site scripting (XSS) vulnerability in ClipBucket 2.6 allows remote attackers to inject arbitrary web script or HTML via the type parameter to view_channe…
CVE-2011-37172011-09-23ClipBucket 2.0.9 allows remote attackers to obtain sensitive information via a direct request to a .php file, which reveals the installation path in an error m…