ClipBucket V5 5.5.1 through 5.5.3-#153 OS Command Injection via Installer php_cli_filepath Parameter

ClipBucket: Blind SQL Injection in progress_video.php

ClipBucket: Remote Play URL Command Injection

ClipBucket v5 Vulnerable to Blind SQL Injection through Channel Comments

ClipBucket V5 Playlist Cover File Upload to Remote Code Execution

Untrusted Deserialization in ClipBucket-v5 Version 5.5.1 Revision 199 and Below

ClipBucket V5 Avatar URL Path Traversal to Arbitrary File Delete

ClipBucket's Manage Photos Feature is Vulnerable to Stored XSS via Collection Name

ClipBucket < 5.5.3-#182 Remote Code Execution via Photo Upload Endpoint

ClipBucket: Blind SQL Injection in subtitle_edit.php

ClipBucket v5 has time-based Blind SQL Injection in ajax.php that leads to Data Exfiltration

ClipBucket v5 is vulnerable to password reset link manipulation

Untrusted Deserialization in ClipBucket-v5 Version 2.0 to 5.5.1 Revision 199

ClipBucket v5 before 5.5.3-#182 SQL Injection via search_result.php

ClipBucket v5 Affected by Remote Code Execution via Avatar/Background File Upload Race Condition

ClipBucket V5 Unauthenticated Template Directory Update to Denial-of-Service

ClipBucket v5 through 5.5.3-#197 SQL Injection via ads_manager.php delete Parameter

ClipBucket v5 before 5.5.3-#197 Path Traversal via template_editor.php

ClipBucket v5 executes arbitrary PHP code

ClipBucket V5 Blind SQL injection in the Admin Panel

ClipBucket: Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')

ClipBucket < 5.5.3-#182 Blind SQL Injection via Private Message Deletion Endpoint

ClipBucket < 5.5.3-#182 Blind SQL Injection via Photo Deletion Endpoint

ClipBucket: IDOR in videos subtitle editor

ClipBucket v5 has IDOR in Collection Item Management

ClipBucket v5 Unauthenticated Object Flagging Vulnerability

ClipBucket v5: SQL Injection possible through ClipBucket Custom Fields plugin

ClipBucket path traversal vulnerability in template editor allows arbitrary file read and write

ClipBucket v5 through 5.5.3-#206 Reflected XSS via edit_language in language_settings.php

ClipBucket v5 through 5.5.3-#206 Reflected XSS via type Parameter in flagged_item.php

ClipBucket v5 before 5.5.3-#182 Reflected XSS via Query Parameters

ClipBucket v5 through 5.5.3-#197 SQL Injection via language_id Parameter

ClipBucket v5 through 5.5.3-#197 SQL Injection via videoid Parameter

ClipBucket v5 has Stored XSS via Collection name

ClipBucket v5: Stored XSS Vulnerability in Manage Playlists

ClipBucket v5's Manage Photo Feature is Vulnerable to Stored XSS Attack via Photo Title

ClipBucket v5: Stored XSS via Collection Tags

ClipBucket v5 stored XSS via video/photo fields

ClipBucket v5 enables internal network scans via an SSRF vulnerability

ClipBucket v5 through 5.5.3-#206 Reflected XSS via add_todo val Parameter

ClipBucket: SQL Wildcard Injection in Subtitle Edit Endpoint Allows Mass Subtitle Overwrite