ClipBucket 'ofc_upload_image.php' Arbitrary PHP Code Execution Vulnerability

Bugtraq ID:	62776
Class:	Unknown
CVE:
Remote:	Yes
Local:	No
Published:	Oct 02 2013 12:00AM
Updated:	Oct 09 2013 12:57AM
Credit:	Gabby
Vulnerable:
Not Vulnerable:

ClipBucket 'ofc_upload_image.php' Arbitrary PHP Code Execution Vulnerability

ClipBucket is prone to an arbitrary PHP code-execution vulnerability.

An attacker can exploit this issue to execute arbitrary PHP code within the context of the web server.

ClipBucket 2.6 Revision 738 is vulnerable; other versions may also be affected.

ClipBucket 'ofc_upload_image.php' Arbitrary PHP Code Execution Vulnerability

The following exploits are available:

• /data/vulnerabilities/exploits/62776.php
• /data/vulnerabilities/exploits/62776.rb

ClipBucket 'ofc_upload_image.php' Arbitrary PHP Code Execution Vulnerability

Solution:
Currently, we are not aware of any vendor-supplied patches. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].

ClipBucket 'ofc_upload_image.php' Arbitrary PHP Code Execution Vulnerability

References:

• ClipBucket Homepage (ClipBucket)