| ID | 
        
          CVE-2018-7666
         | 
      
      
          | Sažetak | 
        An issue was discovered in ClipBucket before 4.0.0 Release 4902. SQL injection vulnerabilities exist in the actions/vote_channel.php channelId parameter, the ajax/commonAjax.php email parameter, and the ajax/commonAjax.php username parameter. | 
      
      
          | Reference | 
        
          
         | 
      
      
        | CVSS | 
        
          
              | Base:           | 7.5 |  
              | Impact:         | 6.4 |  
              | Exploitability: | 10.0 |  
           
         | 
      
    
        | Pristup | 
        
        
            | Vektor | Složenost | Autentikacija |  
            
            | NETWORK | 
            LOW | 
            NONE | 
             
         
         | 
    
      
        | Impact | 
        
        
            | Povjerljivost | Cjelovitost | Dostupnost |  
            
            | PARTIAL | 
            PARTIAL | 
            PARTIAL | 
             
         
         | 
    
    
        | CVSS vektor | 
        AV:N/AC:L/Au:N/C:P/I:P/A:P | 
      
      
          | Zadnje važnije ažuriranje | 
          
            27-03-2018 - 14:49 | 
          
      
      
          | Objavljeno | 
          
            05-03-2018 - 07:29 |