CVE-2025-21624 PoC — ClipBucket 代码问题漏洞

Source

https://github.com/shreyas-malhotra/CVE-2025-21624

Associated Vulnerability

Title:ClipBucket 代码问题漏洞 (CVE-2025-21624)
Description:ClipBucket是MacWarrior开源的一个开源且可免费下载的 PHP 脚本。用于共享视频网站。 ClipBucket V5 5.5.1 - 238及之前版本存在安全漏洞，该漏洞源于文件上传功能中存在不正确检查，从而允许在服务器上存储和执行webshell或其他恶意文件。

Description

PoC, and documentation of deployment of a vulnerable instance of ClipBucket-v5 for demonstration of CVE-2025-21624.

File Snapshot


 [4.0K]  /data/pocs/717b8ef5c735f3fc1c307261ceac537713f8bbef
├── [4.0K]  attachments
│   └── [117K]  Screenshot from 2025-03-02 17-48-56.png
├── [1.7K]  Development of build script.md
└── [4.4K]  Exploitation.md

1 directory, 3 files

Shenlong Bot has cached this for you

Remarks

1. It is advised to access via the original source first.

2. If the original source is unavailable, please email f.jinxu#gmail.com for a local snapshot (replace # with @).

3. Shenlong has snapshotted the POC code for you. To support long-term maintenance, please consider donating. Thank you for your support.

Goal Reached Thanks to every supporter — we hit 100%!