CVE-2025-62423: ClipBucket V5 provides open source video hosting with PHP. In version5.5.2 - #140 and earlier, a Blind SQL injection vulnerability exists in the Admin Area’s…

PriorityP341high7.2CVSS 3.1

AVNACLPRHUINSUCHIHAH

EPSS

0.47%

37.3th percentile

ClipBucket V5 provides open source video hosting with PHP. In version5.5.2 - #140 and earlier, a Blind SQL injection vulnerability exists in the Admin Area’s “/admin_area/login_as_user.php” file. Exploiting this vulnerability requires access privileges to the Admin Area.

Affected

2 ranges

Vendor	Product	Version range	Fixed in
macwarrior	clipbucket-v5	<= 5.5.2 - #140	—
oxygenz	clipbucket	>= 5.3 < 5.5.2-142	5.5.2-142

Stop checking back — get the weekly exploitation signal.

Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.