Vulnerabilities

TI-2013-06183 CVE-2013-10040 · GHSA-99x8-h6hx-3fg9

ClipBucket <= 2.6 ofc_upload_image.php Arbitrary File Upload RCE

HIGH 82

ClipBucket version 2.6 and earlier contains a critical vulnerability in the ofc_upload_image.php script located at /admin_area/charts/ofc-library/.

CVSS 4.0CRITICAL 10.0 Network No auth No interaction EPSS 0.04374 Published 2025-07-31 No fix listed CWE-434

TI-2018-05525 CVE-2018-7666 · GHSA-86g5-f4h4-8wmc

An issue was discovered in ClipBucket before 4.0.0 Release 4902.

MEDIUM 45

An issue was discovered in ClipBucket before 4.0.0 Release 4902.

CVSS 3.0CRITICAL 9.8 Network No auth No interaction EPSS 0.01309 Published 2018-03-05 No fix listed CWE-89

TI-2018-05524 CVE-2018-7665 · GHSA-vmv9-wqwh-2377

An issue was discovered in ClipBucket before 4.0.0 Release 4902.

MEDIUM 58

An issue was discovered in ClipBucket before 4.0.0 Release 4902.

CVSS 3.0CRITICAL 9.8 Network No auth No interaction EPSS 0.15884 Published 2018-03-05 No fix listed CWE-434

TI-2018-05523 CVE-2018-7664 · GHSA-xxv9-6fj9-h72p

An issue was discovered in ClipBucket before 4.0.0 Release 4902.

MEDIUM 46

An issue was discovered in ClipBucket before 4.0.0 Release 4902.

CVSS 3.0CRITICAL 9.8 Network No auth No interaction EPSS 0.01999 Published 2018-03-05 No fix listed CWE-78

TI-2016-09358 CVE-2016-1000307 · GHSA-5mxx-qhgm-xwmx

Multiple Cross Site Scripting (XSS) Vulnerabilities in ClipBucket v2.8.1 and probably…

LOW 29

Multiple Cross Site Scripting (XSS) Vulnerabilities in ClipBucket v2.8.1 and probably prior allow Remote Attackers to inject arbitrary web script or HTML via (1) profile_desc, about_me, schools, occupation, companies, ho…

CVSS 3.0MEDIUM 6.1 Network No auth User interaction EPSS 0.00754 Published 2017-04-06 No fix listed CWE-79

TI-2015-03911 CVE-2015-4673 · GHSA-v4gg-qc2h-644g

Multiple cross-site scripting (XSS) vulnerabilities in ClipBucket 2.7.0.5 allow remote…

LOW 26

Multiple cross-site scripting (XSS) vulnerabilities in ClipBucket 2.7.0.5 allow remote authenticated users to inject arbitrary web script or HTML via (1) the collection_description parameter to upload/manage_collections.…

CVSS 3.0MEDIUM 5.4 Network Low privileges User interaction EPSS 0.00802 Published 2017-04-06 No fix listed CWE-79

TI-2016-04191 CVE-2016-4848 · GHSA-r22p-3qvm-f7xg

Cross-site scripting (XSS) vulnerability in ClipBucket before 2.8.1 RC2 allows remote…

LOW 31

Cross-site scripting (XSS) vulnerability in ClipBucket before 2.8.1 RC2 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.

CVSS 3.0MEDIUM 6.1 Network No auth User interaction EPSS 0.01627 Published 2016-09-02 No fix listed CWE-79

TI-2012-04881 CVE-2012-5849 · GHSA-mp64-9x72-6p5j

Multiple SQL injection vulnerabilities in ClipBucket 2.6 Revision 738 and earlier allow…

LOW 38

Multiple SQL injection vulnerabilities in ClipBucket 2.6 Revision 738 and earlier allow remote attackers to execute arbitrary SQL commands via the (1) uid parameter in an add_friend action to ajax.php; id parameter in a…

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.02836 Published 2015-05-14 No fix listed CWE-89

TI-2015-01888 CVE-2015-2102 · GHSA-r32h-qqj3-9xpg

SQL injection vulnerability in view_item.php in ClipBucket 2.7 RC3 (2.7.0.4.v2929-rc3)…

LOW 37

SQL injection vulnerability in view_item.php in ClipBucket 2.7 RC3 (2.7.0.4.v2929-rc3) allows remote attackers to execute arbitrary SQL commands via the item parameter.

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.02397 Published 2015-02-27 No fix listed CWE-89

TI-2014-03412 CVE-2014-4187 · GHSA-g5rr-93xh-mwfm

Cross-site scripting (XSS) vulnerability in signup.php in ClipBucket allows remote…

LOW 23

Cross-site scripting (XSS) vulnerability in signup.php in ClipBucket allows remote attackers to inject arbitrary web script or HTML via the Username field.

CVSS 2.0MEDIUM 4.3 Network No auth Interaction — EPSS 0.01423 Published 2014-06-17 No fix listed CWE-79

TI-2012-05362 CVE-2012-6644 · GHSA-4whx-q4g9-v3mj

Multiple cross-site scripting (XSS) vulnerabilities in ClipBucket 2.6 allow remote…

LOW 26

Multiple cross-site scripting (XSS) vulnerabilities in ClipBucket 2.6 allow remote attackers to inject arbitrary web script or HTML via the (1) cat parameter to channels.php, (2) collections.php, (3) groups.php, or (4) v…

CVSS 2.0MEDIUM 4.3 Network No auth Interaction — EPSS 0.03177 Published 2014-04-08 No fix listed CWE-79

TI-2012-05361 CVE-2012-6643 · GHSA-jh6g-fpjw-w958

Multiple SQL injection vulnerabilities in the update_counter function in…

LOW 36

Multiple SQL injection vulnerabilities in the update_counter function in includes/functions.php in ClipBucket 2.6 allow remote attackers to execute arbitrary SQL commands via the time parameter to (1) videos.php or (2) c…

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.01545 Published 2014-04-08 No fix listed CWE-89

TI-2012-05360 CVE-2012-6642 · GHSA-5cq7-x4cm-9fqp

Cross-site scripting (XSS) vulnerability in ClipBucket 2.6 allows remote attackers to…

LOW 22

Cross-site scripting (XSS) vulnerability in ClipBucket 2.6 allows remote attackers to inject arbitrary web script or HTML via the type parameter to view_channel.php.

CVSS 2.0MEDIUM 4.3 Network No auth Interaction — EPSS 0.00931 Published 2014-04-08 No fix listed CWE-79

TI-2011-03274 CVE-2011-3717 · GHSA-9c96-x75c-9vrj

ClipBucket 2.0.9 allows remote attackers to obtain sensitive information via a direct…

LOW 26

ClipBucket 2.0.9 allows remote attackers to obtain sensitive information via a direct request to a .php file, which reveals the installation path in an error message, as demonstrated by plugins/signup_captcha/signup_capt…

CVSS 2.0MEDIUM 5.0 Network No auth Interaction — EPSS 0.01335 Published 2011-09-23 No fix listed CWE-200

Vulnerabilities

Filters