Cobub Razor
8 CVEs affecting Cobub Razor. Latest disclosed: 2024-03-25. Critical: 2, High: 4.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2024-28421 | Critical | 9.8 | 2024-03-25 | SQL Injection vulnerability in Razor 0.8.0 allows a remote attacker to escalate privileges via the ChannelModel::updateapk method of the channelmodle.php |
CVE-2019-10276 | Critical | 9.8 | 2019-03-29 | Western Bridge Cobub Razor 0.8.0 has a file upload vulnerability via the web/assets/swf/uploadify.php URI, as demonstrated by a .php file with the image/jpeg c… |
CVE-2018-7746 | High | 8.8 | 2018-03-07 | An issue was discovered in Western Bridge Cobub Razor 0.7.2. Authentication is not required for /index.php?/manage/channel/modifychannel. For example, with a c… |
CVE-2018-7720 | High | 8.8 | 2018-03-07 | A cross-site request forgery (CSRF) vulnerability exists in Western Bridge Cobub Razor 0.7.2 via /index.php?/user/createNewUser/, resulting in account creation. |
CVE-2018-8056 | High | 7.5 | 2018-03-11 | Physical path Leakage exists in Western Bridge Cobub Razor 0.8.0 via an invalid channel_name parameter to /index.php?/manage/channel/addchannel or a direct req… |
CVE-2018-7745 | High | 7.5 | 2018-03-07 | An issue was discovered in Western Bridge Cobub Razor 0.7.2. Authentication is not required for /index.php?/install/installation/createuserinfo requests, resul… |
CVE-2022-36747 | Medium | 6.1 | 2022-08-30 | Razor v0.8.0 was discovered to contain a cross-site scripting (XSS) vulnerability via the function uploadchannel(). |
CVE-2018-8770 | Medium | 5.3 | 2018-03-18 | Physical path Leakage exists in Western Bridge Cobub Razor 0.8.0 via generate.php, controllers/getConfigTest.php, controllers/getUpdateTest.php, controllers/po… |