CVE-2012-6643

Multiple SQL injection vulnerabilities in the update_counter function in includes/functions.php in ClipBucket 2.6 allow remote attackers to execute arbitrary SQL commands via the time parameter to (1) videos.php or (2) channels.php. NOTE: some of these details are obtained from third party information.
Configurations

Configuration 1 (hide)

cpe:2.3:a:clip-bucket:clipbucket:2.6:*:*:*:*:*:*:*

History

No history.

Information

Published : 2014-04-08 14:22

Updated : 2024-02-28 12:20


NVD link : CVE-2012-6643

Mitre link : CVE-2012-6643

CVE.ORG link : CVE-2012-6643


JSON object : View

Products Affected

clip-bucket

  • clipbucket
CWE
CWE-89

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')