CVE-2026-100372— ClipBucket v5 before 5.5.3-#197 Path Traversal via template_editor.php
Quick assessment
Affected
MacWarrior clipbucket-v5
Exploitation
No confirmed in-the-wild exploitation; assess based on exposure
Recommended action
Check the vendor advisory and references for a fixed version. If immediate upgrade is impossible, restrict exposure and increase monitoring.
ClipBucket v5 在 5.5.3-#197 版本之前，其管理员模板编辑器中存在路径遍历漏洞。攻击者可以通过在“文件夹”参数中提供目录遍历序列，将 PHP 文件覆盖，从而获得对系统的控制。拥有管理模板访问权限的攻击者可以遍历 layout 目录之外的文件，修改可执行的 PHP 文件，并以 Web 服务器用户的身份实现远程代码执行。
Possible ATT&CK Techniques 2 AI
T1059 · Command and Scripting Interpreter T1190 · Exploit Public-Facing ApplicationAffected Version Matrix 2
| Vendor | Product | Version Range | Status |
|---|---|---|---|
| MacWarrior | clipbucket-v5 | < 5.5.3-#197 |
affected |
5.5.3-#197 |
unaffected |
Get alerts for future matching vulnerabilities
Log in to subscribe
I. Basic Information for CVE-2026-100372
Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
ClipBucket v5 before 5.5.3-#197 Path Traversal via template_editor.php
Source: CVE Program / CVE List V5
Vulnerability Description
ClipBucket v5 before 5.5.3-#197 contains a path traversal vulnerability in the admin template editor that allows authenticated administrators to overwrite PHP files by supplying directory traversal sequences in the folder parameter. Attackers with manage_template_access permission can traverse outside the layout directory to modify executable PHP files and achieve remote code execution as the web server user.
Source: CVE Program / CVE List V5
CVSS Information
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
Source: CVE Program / CVE List V5
Vulnerability Type
对路径名的限制不恰当(路径遍历)
Source: CVE Program / CVE List V5
Affected Products
| Vendor | Product | Affected Versions | CPE | Subscribe |
|---|---|---|---|---|
| MacWarrior | clipbucket-v5 | 0 ~ 5.5.3-#197 | - |
|
II. Public POCs for CVE-2026-100372
| # | POC Description | Source Link | Shenlong Link |
|---|
AI-Generated POC
Premium
No public POC found.
Login to generate AI POCIII. Intelligence Information for CVE-2026-100372
请登录查看更多情报信息。
Patches & Fixes for CVE-2026-100372 (1)
Vendor Advisories for CVE-2026-100372 (1)
Proof of Concept for CVE-2026-100372 (1)
-
🔗 CVE-2026-100372 - ClipBucket v5 before 5.5.3-#197 Path Traversal via template_editor.php - HackMD Read full article exploit third-party-advisory
Other References for CVE-2026-100372 (2)
IV. Related Vulnerabilities
Same product: clipbucket-v5
-
CVE-2026-102570
ClipBucket v5 through 5.5.3-#197 SQL Injection via language_ -
CVE-2026-102569
ClipBucket v5 through 5.5.3-#197 SQL Injection via videoid P -
CVE-2026-96272
ClipBucket v5 before 5.5.3-#182 SQL Injection via search_res -
CVE-2026-95812
ClipBucket v5 before 5.5.3-#182 Reflected XSS via Query Para -
CVE-2026-77929
ClipBucket < 5.5.3-#182 Remote Code Execution via Photo Uplo
Same vendor: MacWarrior
-
CVE-2026-102570
ClipBucket v5 through 5.5.3-#197 SQL Injection via language_ -
CVE-2026-102569
ClipBucket v5 through 5.5.3-#197 SQL Injection via videoid P -
CVE-2026-96272
ClipBucket v5 before 5.5.3-#182 SQL Injection via search_res -
CVE-2026-95812
ClipBucket v5 before 5.5.3-#182 Reflected XSS via Query Para -
CVE-2026-77929
ClipBucket < 5.5.3-#182 Remote Code Execution via Photo Uplo
Same weakness: CWE-22
-
CVE-2026-96419
Improper Limitation of a Pathname to a Restricted Directory -
CVE-2026-96440
Flowring Agentflow 4.0 - Improper Limitation of a Pathname t -
CVE-2026-102332
Dozzle before 11.1.2 Path Traversal via Log ZIP Download -
CVE-2024-58386
ZoneMinder 1.37.x Path Traversal via files view -
CVE-2026-101142
Eleveo Quality Management Questionnaire Audio Upload Scoreca
V. Comments for CVE-2026-100372
No comments yet