CVE-2019-10276

2019-03-2907:29:00

Google

osv.dev

7.2 High

AI Score

Confidence

High

0.004 Low

EPSS

Percentile

75.1%

JSON

Western Bridge Cobub Razor 0.8.0 has a file upload vulnerability via the web/assets/swf/uploadify.php URI, as demonstrated by a .php file with the image/jpeg content type.

CPENameOperatorVersion
razoreq0.4
razoreq0.1
razoreq0.6
razoreq0.7.2
razoreq0.7
razoreq0.5
razoreq0.7.1
razoreq0.8.0
razoreq0.3.1

Name	Operator	Version
razor	eq	0.4
razor	eq	0.1
razor	eq	0.6
razor	eq	0.7.2
razor	eq	0.7
razor	eq	0.5
razor	eq	0.7.1
razor	eq	0.8.0
razor	eq	0.3.1

References

github.com/cobub/razor/issues/168

github.com/kyrie403/Vuln/blob/master/Cobub%20Razor/Cobub%20Razor%20-%20file%20upload%20vulnerability.md