Back hackmd.io

Sqli Photo Seach Clipbucketv5

hackmd.io • September 23, 2026

## CVE-2026-96272 - ClipBucket v5 before 5.5.3-#182 SQL Injection via search_result.php

- Patch commit:

ClipBucket v5 before 5.5.3-#182 contains a blind SQL injection vulnerability in the photo endpoint where the `query` parameter is passed unsanitized into SQL WHERE and ORDER BY clauses. Unauthenticated attackers can exploit time-based blind SQL injection techniques to extract user credentials, email addresses, and administrator password hashes for account takeover.

Any unauthenticated user can extract sensitive data (user credentials, emails, admin hashes) via time-based blind techniques, potentially leading to full account takeover.

1. Open the ClipBucket homepage (no authentication required).

![image](

2. Use the photo box, or send the request directly:

GET /clipbucket-v5-5.5.3-182/search_result.php?query=%27)%20OR%20SLEEP(5)--%20-&type=photos HTTP/1.1

3. Observe response time: ~5 seconds confirms the injection.

![image](

The full story

This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.

Critical SQL Injection Vulnerability in ClipBucket v5 Disclosed A blind SQL injection vulnerability (CVE-2026-96272) has been identified in ClipBucket v5 prior to version 5.5.3-#182. The vulnerability allows unauthenticated attackers to exploit the photo endpoint by sending crafted requests that include unsanitized query parameters. This could lead to the extraction of sensitive user data, including credentials and administrator password hashes, potentially resulting in account takeovers. The risk is particularly high for internet-accessible photo or media-sharing sites running the affected versions. While the vulnerability is confirmed, the urgency for active exploitation remains uncertain as no proof-of-concept or exploitation in the wild has been reported. Administrators are advised to upgrade to the patched version promptly or implement security measures such as restricting public access. Monitoring for unusual requests and reviewing logs for anomalies is also recommended. 2 sources 58

Extracted Entities

Sqli Photo Seach Clipbucketv5

The full story

Extracted Entities

Attack Types (1)

CVEs (1)

CWE Weaknesses (1)

MITRE ATT&CK (1)

Platforms (1)

Vulnerabilities (1)