4.3

CVE-2012-6644

Multiple cross-site scripting (XSS) vulnerabilities in ClipBucket 2.6 allow remote attackers to inject arbitrary web script or HTML via the (1) cat parameter to channels.php, (2) collections.php, (3) groups.php, or (4) videos.php; (5) query parameter to search_result.php; or (6) type parameter to view_collection.php or (7) view_item.php.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Clip-bucket ≫ Clipbucket Version2.6
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 3.12% 0.862
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
nvd@nist.gov 4.3 8.6 2.9
AV:N/AC:M/Au:N/C:N/I:P/A:N
CWE-79 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')

The product does not neutralize or incorrectly neutralizes user-controllable input before it is placed in output that is used as a web page that is served to other users.

http://osvdb.org/78199
http://secunia.com/advisories/47474
http://packetstormsecurity.org/files/108489/clipbucket-sqlxss.txt
http://www.securityfocus.com/bid/51321
https://exchange.xforce.ibmcloud.com/vulnerabilities/72245
http://osvdb.org/78193
http://osvdb.org/78194
http://osvdb.org/78195
http://osvdb.org/78196
http://osvdb.org/78197
http://osvdb.org/78198
http://osvdb.org/78200
http://www.exploit-db.com/exploits/18341