CVE-2018-7666

概要

参考情報

• lists.openwall.net/full-disclosure/2018/02/27/1 · Exploit
• sec-consult.com/en/blog/advisories/os-command-injection-arbitrary-file-upload-sql-injection-in-clipbucket/index.html · Exploit

clipbucket のその他の脆弱性

• CVE-2013-10040緊急 9.8ClipBucket version 2.6 and earlier contains a critical vulnerability in the ofc_upload_image.php script located at /admin_area/charts/ofc-li…
• CVE-2018-7665緊急 9.8An issue was discovered in ClipBucket before 4.0.0 Release 4902. A malicious file can be uploaded via the name parameter to actions/beats_up…
• CVE-2018-7664緊急 9.8An issue was discovered in ClipBucket before 4.0.0 Release 4902. Any OS commands can be injected via shell metacharacters in the file_name p…
• CVE-2016-1000307中 6.1Multiple Cross Site Scripting (XSS) Vulnerabilities in ClipBucket v2.8.1 and probably prior allow Remote Attackers to inject arbitrary web s…
• CVE-2015-4673中 5.4Multiple cross-site scripting (XSS) vulnerabilities in ClipBucket 2.7.0.5 allow remote authenticated users to inject arbitrary web script or…