Clipbucket V5
Approved changes feed: RSS · Atom
cpe:2.3:a:macwarrior:clipbucket-v5:*:*:*:*:*:*:*:*part: a version: * update: *
| Vendor | Macwarrior (2af85956-20e3-5a1f-b0a1-33c18464ab9e) |
|---|---|
| Product | Clipbucket V5 (abc64dfe-3562-583b-a6c1-64a4a8bb93e9) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
Notes
Imported from gcve-enriched-dumps CVE data
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2026-110625 |
vulnerable | 2026-11-03 10:16:01.062353 |
ClipBucket v5 through 5.5.3-#206 Reflected XSS via type Parameter in flagged_item.php
MEDIUM (6.1)
ClipBucket v5 through 5.5.3-#206 contains a reflected cross-site scripting vulnerability in admin_area/flagged_item.php via the unencoded type GET parameter. Attackers can send crafted flagged_item.php?type= links to logged-in administrators or moderators to execute injected script in the admin panel origin.
Published: 2026-10-14T14:17:01.287Z
Updated: 2026-10-14T20:25:39.213Z Reference links
|
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-110627 |
vulnerable | 2026-11-03 10:16:00.881945 |
ClipBucket v5 through 5.5.3-#206 Reflected XSS via add_todo val Parameter
MEDIUM (4.7)
ClipBucket v5 through 5.5.3-#206 contains a reflected cross-site scripting vulnerability in admin_area/index.php that allows attackers to inject HTML via the val parameter in mode=add_todo. Attackers can lure a logged-in administrator into submitting a cross-site POST form without CSRF protection, executing script in the admin panel origin.
Published: 2026-10-14T14:17:02.639Z
Updated: 2026-10-14T18:13:26.073Z Reference links
|
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-110626 |
vulnerable | 2026-11-03 10:16:00.289548 |
ClipBucket v5 through 5.5.3-#206 Reflected XSS via edit_language in language_settings.php
MEDIUM (6.1)
ClipBucket v5 through 5.5.3-#206 contains a reflected cross-site scripting vulnerability in admin_area/language_settings.php via the unencoded edit_language GET parameter. Attackers can send administrators with basic_settings permission a crafted link whose payload is echoed into a hidden input, executing script in the admin panel origin.
Published: 2026-10-14T14:17:01.968Z
Updated: 2026-10-20T01:17:40.484Z Reference links
|
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-95812 |
vulnerable | 2026-10-13 12:28:40.579446 |
ClipBucket v5 before 5.5.3-#182 Reflected XSS via Query Parameters
MEDIUM (6.1)
ClipBucket v5 before 5.5.3-#182 contains a reflected cross-site scripting vulnerability in the sort_link() helper function that fails to sanitize cat, sort, and time query parameters. Attackers can craft malicious requests with injected script payloads in these parameters to execute arbitrary JavaScript in victims' browsers under the application origin.
Published: 2026-09-22T20:21:10.251Z
Updated: 2026-10-06T13:37:06.270Z Reference links
|
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-96272 |
vulnerable | 2026-10-13 12:28:33.402376 |
ClipBucket v5 before 5.5.3-#182 SQL Injection via search_result.php
HIGH (7.5)
ClipBucket v5 before 5.5.3-#182 contains a blind SQL injection vulnerability in the photo search endpoint where the query parameter is passed unsanitized into SQL WHERE and ORDER BY clauses. Unauthenticated attackers can exploit time-based blind SQL injection techniques to extract user credentials, email addresses, and administrator password hashes for account takeover.
Published: 2026-09-23T00:29:50.164Z
Updated: 2026-10-06T13:37:06.995Z Reference links
|
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-77929 |
vulnerable | 2026-10-13 12:28:29.547879 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-49482 |
vulnerable | 2026-07-29 00:57:45.474217 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-47238 |
vulnerable | 2026-07-29 00:54:59.933448 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-45418 |
vulnerable | 2026-07-29 00:52:15.365852 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-45060 |
vulnerable | 2026-07-29 00:52:15.027652 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-42846 |
vulnerable | 2026-07-29 00:49:32.306398 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-42847 |
vulnerable | 2026-06-08 08:03:16.817665 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-32321 |
vulnerable | 2026-06-08 07:57:17.416732 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-28354 |
vulnerable | 2026-06-08 07:55:15.178158 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-26997 |
vulnerable | 2026-06-08 07:53:21.817525 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-26005 |
vulnerable | 2026-06-08 07:53:20.693465 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-25728 |
vulnerable | 2026-06-08 07:53:20.269581 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-21875 |
vulnerable | 2026-06-08 07:49:16.932571 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-65113 |
vulnerable | 2026-06-08 07:39:20.725142 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-64339 |
vulnerable | 2026-06-08 07:39:18.399614 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-64338 |
vulnerable | 2026-06-08 07:39:18.399192 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-64336 |
vulnerable | 2026-06-08 07:39:18.398605 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-64114 |
vulnerable | 2026-06-08 07:39:18.014385 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-62715 |
vulnerable | 2026-06-08 07:39:16.521966 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-62709 |
vulnerable | 2026-06-08 07:39:16.509348 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-62430 |
vulnerable | 2026-06-08 07:37:29.656973 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-62429 |
vulnerable | 2026-06-08 07:37:29.656590 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-62424 |
vulnerable | 2026-06-08 07:37:29.651317 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-62423 |
vulnerable | 2026-06-08 07:37:29.650064 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-21624 |
vulnerable | 2026-06-08 07:08:57.054230 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-21623 |
vulnerable | 2026-06-08 07:08:57.053728 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-21622 |
vulnerable | 2026-06-08 07:08:57.052636 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-54136 |
vulnerable | 2026-06-08 06:54:16.093062 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-54135 |
vulnerable | 2026-06-08 06:54:16.091856 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.
Inspect record JSON
Open this panel to browse, search, copy or download the JSON record.