Description
ClipBucket v5 through 5.5.3-#197 contains a time-based blind SQL injection vulnerability in the admin video edit function where the videoid parameter is concatenated into an UPDATE statement without proper escaping. An authenticated administrator with video_moderation permission can inject arbitrary SQL commands to extract or modify database contents.
Affected products
Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.
MacWarrior clipbucket-v5
Default version status: unaffected
0 to ≤ 5.5.3-#197affected
pkg:github/MacWarrior/clipbucket-v5References
- https://github.com/MacWarrior/clipbucket-v5/commit/1c30d0b0e093ecfc656c98758707352abb2fc6ab ↗
- https://github.com/MacWarrior/clipbucket-v5/blob/f15cef1a2431786c31ffd79e81f55d6eeca4ebc0/upload/includes/classes/video.class.php#L1972 ↗
- https://hackmd.io/@leediay/two-blind-sqli-clickbucketv5-version_5_5_3_197 ↗
- https://github.com/MacWarrior/clipbucket-v5 ↗
- https://www.vulncheck.com/advisories/clipbucket-v5-through-5.5.3-197-sql-injection-via-videoid-parameter ↗