Filtered by vendor Clipbucket Project Subscriptions
Total 1 CVE
CVE Vendors Products Updated CVSS v3.1
CVE-2013-10040 2 Clip-bucket, Clipbucket Project 2 Clipbucket, Clipbucket 2025-11-20 9.8 Critical
ClipBucket version 2.6 and earlier contains a critical vulnerability in the ofc_upload_image.php script located at /admin_area/charts/ofc-library/. This endpoint allows unauthenticated users to upload arbitrary files, including executable PHP scripts. Once uploaded, the attacker can access the file via a predictable path and trigger remote code execution.