SQL injection vulnerability in view_item.php in ClipBucket 2.7 RC3 (2.7.0.4.v2929-rc3) allows remote attackers to execute arbitrary SQL commands via the item parameter.
Source: https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-2102
Reference (s):
- BID:72879
- URL: http://www.securityfocus.com/bid/72879
- BUGTRAQ:20150304 [CVE-2015-2102] Clipbucket 2.7 RC3 0.9 – Blind SQL Injection
- URL: http://www.securityfocus.com/archive/1/534790/100/0/threaded
- EXPLOIT-DB:36156