ClipBucket 'file_results.php' Directory Traversal Vulnerability

Bugtraq ID:	55139
Class:	Input Validation Error
CVE:
Remote:	Yes
Local:	No
Published:	Aug 21 2012 12:00AM
Updated:	Mar 19 2015 09:42AM
Credit:	loneferret
Vulnerable:
Not Vulnerable:

ClipBucket 'file_results.php' Directory Traversal Vulnerability

ClipBucket is prone to a directory-traversal vulnerability because it fails to sufficiently sanitize user-supplied input data.

A remote attacker could exploit the vulnerability using directory-traversal characters ('../') to access arbitrary files that contain sensitive information that could aid in further attacks.

ClipBucket 2.5 is vulnerable; other versions may also be affected.

ClipBucket 'file_results.php' Directory Traversal Vulnerability

An attacker can exploit this issue with a browser.

The following example request is available:

• /data/vulnerabilities/exploits/55139.txt

ClipBucket 'file_results.php' Directory Traversal Vulnerability

Solution:
Currently we are not aware of any vendor-supplied patches. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].

ClipBucket 'file_results.php' Directory Traversal Vulnerability

References:

• ClipBucket Homepage (ClipBucket)