cvedb.io
CVE-2018-7666
CRITICAL · CVSS 9.8
EPSS exploitation probability: 0%
Published 2018-03-05T07:29:00.447 · Last modified 2026-06-17T02:03:30.350

Summary

An issue was discovered in ClipBucket before 4.0.0 Release 4902. SQL injection vulnerabilities exist in the actions/vote_channel.php channelId parameter, the ajax/commonAjax.php email parameter, and the ajax/commonAjax.php username parameter.

Affected products

clip-bucket — clipbucket

Does this affect you?

Add your gear to cvedb and we'll alert you only when clip-bucket ships something exploited.

Check my exposure →

References

This product uses data from the NVD API but is not endorsed or certified by the NVD. Informational only; not professional security advice.