CVE-2012-6644
ClipBucket 2.6 - Cross-Site Scripting via Multiple Parameters
Title source: llmExploitation Summary
EIP tracks 8 public exploits for CVE-2012-6644. PoCs published by YaDoY666.
AI-analyzed exploit summary The provided text describes SQL injection and XSS vulnerabilities in ClipBucket 2.6, with an example XSS payload. No functional exploit code is included.
Description
Multiple cross-site scripting (XSS) vulnerabilities in ClipBucket 2.6 allow remote attackers to inject arbitrary web script or HTML via the (1) cat parameter to channels.php, (2) collections.php, (3) groups.php, or (4) videos.php; (5) query parameter to search_result.php; or (6) type parameter to view_collection.php or (7) view_item.php.
Exploits (8)
The provided text describes SQL injection and XSS vulnerabilities in ClipBucket 2.6, with an example XSS payload. No functional exploit code is included.
The provided text describes SQL injection and XSS vulnerabilities in ClipBucket 2.6, with an example XSS payload. It lacks executable exploit code but details the vulnerability and attack vectors.
This exploit demonstrates a reflected XSS vulnerability in ClipBucket 2.6 by injecting a malicious script via the 'cat' parameter in the videos.php page. The payload triggers an alert dialog, confirming the vulnerability.
This exploit demonstrates a cross-site scripting (XSS) vulnerability in ClipBucket 2.6 via the 'query' parameter in search_result.php. The payload injects a script tag that triggers a JavaScript alert, confirming the vulnerability.
The exploit demonstrates a reflected XSS vulnerability in ClipBucket 2.6 via the 'cat' parameter in groups.php. The payload injects a JavaScript alert, confirming the vulnerability.
The exploit demonstrates a cross-site scripting (XSS) vulnerability in ClipBucket 2.6 by injecting a malicious script into the 'cat' parameter of the collections.php page. The payload triggers an alert dialog, confirming the vulnerability.
The exploit demonstrates a cross-site scripting (XSS) vulnerability in ClipBucket 2.6 by injecting a malicious script into the 'cat' parameter of the channels.php page. The payload triggers an alert dialog, confirming the vulnerability.
This exploit demonstrates multiple XSS and SQL injection vulnerabilities in ClipBucket 2.6. It provides specific URLs with payloads to trigger these vulnerabilities.