Description

Multiple SQL injection vulnerabilities in the update_counter function in includes/functions.php in ClipBucket 2.6 allow remote attackers to execute arbitrary SQL commands via the time parameter to (1) videos.php or (2) channels.php. NOTE: some of these details are obtained from third party information.

Remediation

References

CVE-2012-6643

Related Vulnerabilities

OpenSSL Improper Restriction of Operations within the Bounds of a Memory Buffer Vulnerability (CVE-2015-1789)

Internet Information Services Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2003-1582)

WordPress Plugin Analytics Tracker Cross-Site Scripting (1.1.0)

WordPress Plugin Jigoshop Multiple Unspecified Vulnerabilities (1.17.13)

jQuery Validation Other Vulnerability (CVE-2021-43306)

Severity

High

Classification

CVE-2012-6643 CWE-138

Tags

Missing Update Known Vulnerabilities