Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
ClipBucket <= 2.6 ofc_upload_image.php Arbitrary File Upload RCE
Vulnerability Description
ClipBucket version 2.6 and earlier contains a critical vulnerability in the ofc_upload_image.php script located at /admin_area/charts/ofc-library/. This endpoint allows unauthenticated users to upload arbitrary files, including executable PHP scripts. Once uploaded, the attacker can access the file via a predictable path and trigger remote code execution.
CVSS Information
N/A
Vulnerability Type
危险类型文件的不加限制上传
Vulnerability Title
ClipBucket 安全漏洞
Vulnerability Description
ClipBucket是MacWarrior开源的一个开源且可免费下载的 PHP 脚本。用于共享视频网站。 ClipBucket 2.6及之前版本存在安全漏洞，该漏洞源于ofc_upload_image.php端点未经验证，可能导致任意文件上传和远程代码执行。
CVSS Information
N/A
Vulnerability Type
N/A