Oxygenz Clipbucket any version

ClipBucket v5 Vulnerable to Blind SQL Injection through Channel Comments

ClipBucket V5 Playlist Cover File Upload to Remote Code Execution

Untrusted Deserialization in ClipBucket-v5 Version 2.0 to 5.5.1 Revision 199

Untrusted Deserialization in ClipBucket-v5 Version 5.5.1 Revision 199 and Below

ClipBucket 5.5.2 is affected by an improper access control issue where the product is shipped or deployed with hardcoded default administrative credentials. An unauthenticated remote attacker can log in to the administrative panel using these default credentials, resulting in full administrative control of the application.

ClipBucket v5 Affected by Remote Code Execution via Avatar/Background File Upload Race Condition

ClipBucket V5 Avatar URL Path Traversal to Arbitrary File Delete

ClipBucket's Manage Photos Feature is Vulnerable to Stored XSS via Collection Name

ClipBucket v5 has time-based Blind SQL Injection in ajax.php that leads to Data Exfiltration

ClipBucket v5 is vulnerable to password reset link manipulation

ClipBucket V5 Unauthenticated Template Directory Update to Denial-of-Service

An issue in ClipBucket 5.5.0 and prior versions allows an unauthenticated attacker can exploit the plupload endpoint in photo_uploader.php to upload arbitrary files without any authentication, due to missing access controls in the upload handler

ClipBucket v5 executes arbitrary PHP code

ClipBucket V5 Blind SQL injection in the Admin Panel

ClipBucket v5's Manage Photo Feature is Vulnerable to Stored XSS Attack via Photo Title

ClipBucket v5: Stored XSS Vulnerability in Manage Playlists

ClipBucket path traversal vulnerability in template editor allows arbitrary file read and write

An issue Clip Bucket v.5.5.2 Build#90 allows a remote attacker to execute arbitrary codes via the file_downloader.php and the file parameter

ClipBucket v5 Unauthenticated Object Flagging Vulnerability

ClipBucket v5: SQL Injection possible through ClipBucket Custom Fields plugin

ClipBucket v5 has IDOR in Collection Item Management

ClipBucket v5 stored XSS via video/photo fields

ClipBucket v5 has Stored XSS via Collection name

ClipBucket v5: Stored XSS via Collection Tags

ClipBucket v5 enables internal network scans via an SSRF vulnerability