CVE-2018-8056

2018-03-1118:29:00

Google

osv.dev

7 High

AI Score

Confidence

High

0.002 Low

EPSS

Percentile

64.7%

JSON

Physical path Leakage exists in Western Bridge Cobub Razor 0.8.0 via an invalid channel_name parameter to /index.php?/manage/channel/addchannel or a direct request to /export.php.

CPENameOperatorVersion
razoreq0.5
razoreq0.4
razoreq0.1
razoreq0.7
razoreq0.6
razoreq0.3.1
razoreq0.7.2
razoreq0.7.1
razoreq0.8.0

Name	Operator	Version
razor	eq	0.5
razor	eq	0.4
razor	eq	0.1
razor	eq	0.7
razor	eq	0.6
razor	eq	0.3.1
razor	eq	0.7.2
razor	eq	0.7.1
razor	eq	0.8.0

References

github.com/cobub/razor/issues/162

github.com/Kyhvedn/CVE_Description/blob/master/Cobub_Razor_0.8.0_physical_path_leakage.md

www.exploit-db.com/exploits/44495/