CVE-2015-2102

概要

参考情報

• osvdb.org/show/osvdb/118667
• packetstormsecurity.com/files/130485/Clipbucket-2.7.0.4.v2929-rc3-Blind-SQL-Injection.html · Exploit
• exploit-db.com/exploits/36156 · Exploit
• securityfocus.com/archive/1/534790/100/0/threaded
• securityfocus.com/bid/72879

clipbucket のその他の脆弱性

• CVE-2013-10040緊急 9.8ClipBucket version 2.6 and earlier contains a critical vulnerability in the ofc_upload_image.php script located at /admin_area/charts/ofc-li…
• CVE-2018-7666緊急 9.8An issue was discovered in ClipBucket before 4.0.0 Release 4902. SQL injection vulnerabilities exist in the actions/vote_channel.php channel…
• CVE-2018-7665緊急 9.8An issue was discovered in ClipBucket before 4.0.0 Release 4902. A malicious file can be uploaded via the name parameter to actions/beats_up…
• CVE-2018-7664緊急 9.8An issue was discovered in ClipBucket before 4.0.0 Release 4902. Any OS commands can be injected via shell metacharacters in the file_name p…
• CVE-2016-1000307中 6.1Multiple Cross Site Scripting (XSS) Vulnerabilities in ClipBucket v2.8.1 and probably prior allow Remote Attackers to inject arbitrary web s…