CVE-2018-7666

Mô tả

Tham khảo

• lists.openwall.net/full-disclosure/2018/02/27/1 · Exploit
• sec-consult.com/en/blog/advisories/os-command-injection-arbitrary-file-upload-sql-injection-in-clipbucket/index.html · Exploit

Lỗ hổng khác của clipbucket

• CVE-2013-10040NGHIÊM TRỌNG 9.8ClipBucket version 2.6 and earlier contains a critical vulnerability in the ofc_upload_image.php script located at /admin_area/charts/ofc-li…
• CVE-2018-7665NGHIÊM TRỌNG 9.8An issue was discovered in ClipBucket before 4.0.0 Release 4902. A malicious file can be uploaded via the name parameter to actions/beats_up…
• CVE-2018-7664NGHIÊM TRỌNG 9.8An issue was discovered in ClipBucket before 4.0.0 Release 4902. Any OS commands can be injected via shell metacharacters in the file_name p…
• CVE-2016-1000307TRUNG BÌNH 6.1Multiple Cross Site Scripting (XSS) Vulnerabilities in ClipBucket v2.8.1 and probably prior allow Remote Attackers to inject arbitrary web s…
• CVE-2015-4673TRUNG BÌNH 5.4Multiple cross-site scripting (XSS) vulnerabilities in ClipBucket 2.7.0.5 allow remote authenticated users to inject arbitrary web script or…