CVE-2012-6643

Multiple SQL injection vulnerabilities in the update_counter function in includes/functions.php in ClipBucket 2.6 allow remote attackers to execute arbitrary SQL commands via the time parameter to (1) videos.php or (2) channels.php. NOTE: some of these details are obtained from third party information.

CVSS v2.0

7.5 HIGHAV:N/AC:L/Au:N/C:P/I:P/A:P

EPSS

1.67% chance of exploitation in the next 30 days, 75th percentile

Published

2014-04-08

Updated

2024-08-06

ExploitDB entries (2)

• https://www.exploit-db.com/exploits/36532
• https://www.exploit-db.com/exploits/36531

References

• CVE Record
• NVD entry

Related

• CVE-2012-6636
• CVE-2012-6644
• CVE-2012-6635
• CVE-2012-6649
• CVE-2012-6634
• CVE-2012-6653