arslancb/clipbucket

Releases13

Frequency2 months 3 weeks

Last Release over 7 years ago

Stars423

Open source video sharing website script, Tune.pk clone, Youtube clone, dailymotion clone. PHP.

CVE History

CVE	Published	CVSS v3	CVSS v2
CVE-2013-10040 ↗	Jul 31, 2025Thursday, 31 July 2025, 15:15	9.8 CRITICAL	—
ClipBucket version 2.6 and earlier contains a critical vulnerability in the ofc_upload_image.php script located at /admin_area/charts/ofc-library/. This endpoint allows unauthenticated users to upload arbitrary files, including executable PHP scripts. Once uploaded, the attacker can access the file via a predictable path and trigger remote code execution.