Approved changes feed: RSS · Atom

cpe:2.3:a:clip-bucket:clipbucket:2.6:*:*:*:*:*:*:*

part: a version: 2.6 update: *

VendorClip Bucket (6e1031e5-2256-5172-a030-9ba91ad94a88)
ProductClipbucket (5f692071-5604-5810-ac5e-8ce20d4ff81c)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*

Notes

Imported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
pkg:bitbucket/zeeshi7897/clipbucket purl2cpe 2026-06-01 10:17:19.329136
pkg:github/arslancb/clipbucket purl2cpe 2026-06-01 10:17:19.329137
pkg:sourceforge/clipbucket purl2cpe 2026-06-01 10:17:19.329139

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2012-6644 vulnerable 2026-06-08 05:03:01.392702 Details available
Multiple cross-site scripting (XSS) vulnerabilities in ClipBucket 2.6 allow remote attackers to inject arbitrary web script or HTML via the (1) cat parameter to channels.php, (2) collections.php, (3) groups.php, or (4) videos.php; (5) query parameter to search_result.php; or (6) type parameter to view_collection.php or (7) view_item.php.
Published: 2014-04-08T14:00:00.000Z
Updated: 2024-08-06T21:36:01.819Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2012-6643 vulnerable 2026-06-08 05:03:01.392257 Details available
Multiple SQL injection vulnerabilities in the update_counter function in includes/functions.php in ClipBucket 2.6 allow remote attackers to execute arbitrary SQL commands via the time parameter to (1) videos.php or (2) channels.php. NOTE: some of these details are obtained from third party information.
Published: 2014-04-08T14:00:00.000Z
Updated: 2024-08-06T21:36:01.878Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2012-6642 vulnerable 2026-06-08 05:03:01.391824 Details available
Cross-site scripting (XSS) vulnerability in ClipBucket 2.6 allows remote attackers to inject arbitrary web script or HTML via the type parameter to view_channel.php. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information.
Published: 2014-04-08T14:00:00.000Z
Updated: 2024-09-17T02:56:29.871Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.

Inspect record JSON

Open JSON directly

Open this panel to browse, search, copy or download the JSON record.