| Package | Affected versions | Patched versions |
|---|---|---|
| clipbucket | ≤ 2.6 |
ClipBucket version 2.6 and earlier contains a critical vulnerability in the ofc_upload_image.php script located at /admin_area/charts/ofc-library/. This endpoint allows unauthenticated users to upload arbitrary files, including executable PHP scripts. Once uploaded, the attacker can access the file via a predictable path and trigger remote code execution.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free