Clipbucket
Approved changes feed: RSS · Atom
cpe:2.3:a:clip-bucket:clipbucket:*:*:*:*:*:*:*:*part: a version: * update: *
| Vendor | Clip Bucket (6e1031e5-2256-5172-a030-9ba91ad94a88) |
|---|---|
| Product | Clipbucket (5f692071-5604-5810-ac5e-8ce20d4ff81c) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
Notes
Imported from purl2cpe mapping
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
pkg:bitbucket/zeeshi7897/clipbucket |
purl2cpe | 2026-06-01 10:17:19.326310 |
pkg:github/arslancb/clipbucket |
purl2cpe | 2026-06-01 10:17:19.326313 |
pkg:sourceforge/clipbucket |
purl2cpe | 2026-06-01 10:17:19.326315 |
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2026-95812 |
vulnerable | 2026-10-13 12:28:40.580256 |
ClipBucket v5 before 5.5.3-#182 Reflected XSS via Query Parameters
MEDIUM (6.1)
ClipBucket v5 before 5.5.3-#182 contains a reflected cross-site scripting vulnerability in the sort_link() helper function that fails to sanitize cat, sort, and time query parameters. Attackers can craft malicious requests with injected script payloads in these parameters to execute arbitrary JavaScript in victims' browsers under the application origin.
Published: 2026-09-22T20:21:10.251Z
Updated: 2026-10-06T13:37:06.270Z Reference links
|
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-96272 |
vulnerable | 2026-10-13 12:28:33.403218 |
ClipBucket v5 before 5.5.3-#182 SQL Injection via search_result.php
HIGH (7.5)
ClipBucket v5 before 5.5.3-#182 contains a blind SQL injection vulnerability in the photo search endpoint where the query parameter is passed unsanitized into SQL WHERE and ORDER BY clauses. Unauthenticated attackers can exploit time-based blind SQL injection techniques to extract user credentials, email addresses, and administrator password hashes for account takeover.
Published: 2026-09-23T00:29:50.164Z
Updated: 2026-10-06T13:37:06.995Z Reference links
|
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2018-7666 |
vulnerable | 2026-06-08 05:12:03.958066 |
Details available
An issue was discovered in ClipBucket before 4.0.0 Release 4902. SQL injection vulnerabilities exist in the actions/vote_channel.php channelId parameter, the ajax/commonAjax.php email parameter, and the ajax/commonAjax.php username parameter.
Published: 2018-03-05T07:00:00.000Z
Updated: 2024-08-05T06:31:05.117Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2018-7665 |
vulnerable | 2026-06-08 05:12:03.957741 |
Details available
An issue was discovered in ClipBucket before 4.0.0 Release 4902. A malicious file can be uploaded via the name parameter to actions/beats_uploader.php or actions/photo_uploader.php, or the coverPhoto parameter to edit_account.php.
Published: 2018-03-05T07:00:00.000Z
Updated: 2024-08-05T06:31:05.198Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2018-7664 |
vulnerable | 2026-06-08 05:12:03.957279 |
Details available
An issue was discovered in ClipBucket before 4.0.0 Release 4902. Any OS commands can be injected via shell metacharacters in the file_name parameter to /api/file_uploader.php or /actions/file_downloader.php.
Published: 2018-03-05T07:00:00.000Z
Updated: 2024-08-05T06:31:05.042Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2016-4848 |
vulnerable | 2026-06-08 05:07:55.382257 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2016-1000307 |
vulnerable | 2026-06-08 05:07:16.930600 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2013-10040 |
vulnerable | 2026-06-08 05:03:51.900616 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2012-5849 |
vulnerable | 2026-06-08 05:02:58.462308 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.
Inspect record JSON
Open this panel to browse, search, copy or download the JSON record.