cve/2015/CVE-2015-2102.md

CVE-2015-2102

Description

SQL injection vulnerability in view_item.php in ClipBucket 2.7 RC3 (2.7.0.4.v2929-rc3) allows remote attackers to execute arbitrary SQL commands via the item parameter.

POC

Reference

• http://packetstormsecurity.com/files/130485/Clipbucket-2.7.0.4.v2929-rc3-Blind-SQL-Injection.html
• http://www.exploit-db.com/exploits/36156

Github

• https://github.com/ARPSyndicate/cvemon