CVEvulnerability
CVE-2012-6644
4.3 MEDIUM
Official page ↗
- Status
- Modified
- Published
- 2014-04-08
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 4.3 MEDIUM — AV:N/AC:M/Au:N/C:N/I:P/A:N
- Weaknesses
- CWE-79
Description
Multiple cross-site scripting (XSS) vulnerabilities in ClipBucket 2.6 allow remote attackers to inject arbitrary web script or HTML via the (1) cat parameter to channels.php, (2) collections.php, (3) groups.php, or (4) videos.php; (5) query parameter to search_result.php; or (6) type parameter to view_collection.php or (7) view_item.php.
Affected configurations
• clip-bucket clipbucket 2.6
Related
Weakness · CWE (1)
- CWE-79 Improper Neutralization of Input During Web Page Generation weakness
References
- http://osvdb.org/78193 osvdb.org
- http://osvdb.org/78194 osvdb.org
- http://osvdb.org/78195 osvdb.org
- http://osvdb.org/78196 osvdb.org
- http://osvdb.org/78197 osvdb.org
- http://osvdb.org/78198 osvdb.org
- http://osvdb.org/78199 osvdb.org
- http://osvdb.org/78200 osvdb.org
- http://packetstormsecurity.org/files/108489/clipbucket-sqlxss.txt packetstormsecurity.org
- http://secunia.com/advisories/47474 secunia.com
- http://www.exploit-db.com/exploits/18341 www.exploit-db.com
- http://www.securityfocus.com/bid/51321 www.securityfocus.com
- https://exchange.xforce.ibmcloud.com/vulnerabilities/72245 exchange.xforce.ibmcloud.com
- http://osvdb.org/78193 osvdb.org
- http://osvdb.org/78194 osvdb.org
- http://osvdb.org/78195 osvdb.org
- http://osvdb.org/78196 osvdb.org
- http://osvdb.org/78197 osvdb.org
- http://osvdb.org/78198 osvdb.org
- http://osvdb.org/78199 osvdb.org
- http://osvdb.org/78200 osvdb.org
- http://packetstormsecurity.org/files/108489/clipbucket-sqlxss.txt packetstormsecurity.org
- http://secunia.com/advisories/47474 secunia.com
- http://www.exploit-db.com/exploits/18341 www.exploit-db.com
- http://www.securityfocus.com/bid/51321 www.securityfocus.com
- https://exchange.xforce.ibmcloud.com/vulnerabilities/72245 exchange.xforce.ibmcloud.com