一线运维实战手记 · 云计算 · 数据库 · 故障排查
2026年9月30日

CVE-2026-102569 [MEDIUM] – ClipBucket v5 through 5.5.3-#197 contains a time-based blind SQL injection vulnerability i

未分类
📑 文章目录

ClipBucket v5 through 5.5.3-#197 contains a time-based blind SQL injection vulnerability in the admin video edit function where the videoid parameter is concatenated into an UPDATE statement without proper escaping. An authenticated administrator with video_moderation permission can inject arbitrary SQL commands to extract or modify database contents.