CVE-2025-62423Medium· 6.7▾ SunlitClipBucket V5 provides open source video hosting with PHP. In version5.5.2 - #140 and earlier, a Blind SQL injection vulnerability exists in the Admin Area’s “/admin_area/login_as_user.php” file. Exploiting this vulnerability requires ac…
▾ Sunlit zone — Low / medium · no exploitation signal
impact 36.9 · likelihood 0.1 · exploitation 0
Need a working PoC? Pro members can cast a request and our team develops one — it lands right here.
Disclosure to exploitation, from the record and what we observed since indexing it.
Disclosed via NVD
Last analysed / modified upstream
0.5%
ClipBucket V5 provides open source video hosting with PHP. In version5.5.2 - #140 and earlier, a Blind SQL injection vulnerability exists in the Admin Area’s “/admin_area/login_as_user.php” file. Exploiting this vulnerability requires access privileges to the Admin Area.
clipbucket >= 5.3, < 5.5.2-142Upgrade past the affected range:
clipbucket 5.5.2-142Connected by shared product, vendor, weakness, or advisory.
CVE-2025-64114Medium· 6.5ClipBucket v5 is an open source video sharing platform
CVE-2025-62424Medium· 6.7ClipBucket is a web-based video-sharing platform
CVE-2025-62429High· 7.2ClipBucket v5 is an open source video sharing platform
CVE-2025-62430Medium· 5.4ClipBucket v5 is an open source video sharing platform
CVE-2025-65113Medium· 6.5ClipBucket v5 is an open source video sharing platform
CVE-2025-64338Critical· 9.0ClipBucket v5 is an open source video sharing platform