177 matches found
CVE-2018-7720
A cross-site request forgery CSRF vulnerability exists in Western Bridge Cobub Razor 0.7.2 via /index.php?/user/createNewUser/, resulting in account creation...
CVE-2018-7720
The CVE-2018-7720 entry details a CSRF vulnerability in Western Bridge Cobub Razor 0.7.2, exploitable via /index.php?/user/createNewUser/ to create new accounts without proper authorization. The underlying issue is cross-site request forgery that permits account creation, with impact described as...
PT-2018-18252
Name of the Vulnerable Software and Affected Versions: Western Bridge Cobub Razor version 0.7.2 Description: An issue was discovered where authentication is not required for the "/index.php?/install/installation/createuserinfo" API endpoint, resulting in the ability to create accounts without...
CVE-2018-7745: Improper Authentication
An issue was discovered in Western Bridge Cobub Razor 0.7.2. Authentication is not required for /index.php?/install/installation/createuserinfo requests, resulting in account creation...
PT-2018-18234
Name of the Vulnerable Software and Affected Versions: Western Bridge Cobub Razor version 0.7.2 Description: A cross-site request forgery issue exists, allowing for account creation via the "/index.php?/user/createNewUser/" endpoint. Recommendations: For version 0.7.2, consider restricting access...
CVE-2018-7746: Improper Neutralization of Input During Web Page Generation
An issue was discovered in Western Bridge Cobub Razor 0.7.2. Authentication is not required for /index.php?/manage/channel/modifychannel. For example, with a crafted channel name, stored XSS is triggered during a later /index.php?/manage/channel request by an admin...
Western Bridge Cobub Razor Cross-Site Request Forgery Vulnerability
Western Bridge Cobub Razor is an open source mobile application analytics system. The system can provide users with detailed multi-dimensional reports and monitor their mobile applications and applications user behavior statistics. A cross-site request forgery vulnerability exists in Western Brid...
CVE-2018-7720: Cross-Site Request Forgery (CSRF)
A cross-site request forgery CSRF vulnerability exists in Western Bridge Cobub Razor 0.7.2 via /index.php?/user/createNewUser/, resulting in account creation...
PT-2018-18253
Name of the Vulnerable Software and Affected Versions: Western Bridge Cobub Razor version 0.7.2 Description: An issue was discovered where authentication is not required for the "/index.php?/manage/channel/modifychannel" API endpoint. This allows for stored XSS to be triggered during a later...
Visible Systems Razor 4.1 Password File Vulnerability (1)
No description provided by source. source: http://www.securityfocus.com/bid/1424/info The Razor Configuration Management program stores passwords in an insecure manner. A local attacker can obtain the Razor passwords, and either seize control of the software and relevant databases or use those...
php-nuke platinum 7.6.b.5 - Remote File Inclusion Vulnerability
No description provided by source. ---------------------------------------------- GrEeTs To -=sHaDoW sEcUrItY TeAm=- GrEaTs To ---------------------------------------------- A2J, Chucks, The Pitbull, ICQBomber, str0ke ---------------------------------------------- BiG sHoUt OuT tO udplink.net &...
Visible Systems Razor 4.1 Password File Vulnerability (2)
No description provided by source. source: http://www.securityfocus.com/bid/1424/info The Razor Configuration Management program stores passwords in an insecure manner. A local attacker can obtain the Razor passwords, and either seize control of the software and relevant databases or use those...
Razor CMS 1.2 File Disclosure
1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=0 0 1 1 /' \ /'\ /\ \ /'\ 0 0 /, \ /\/\ \ \ \ \ ,/\ /\ \ 1 1 //\ \ /' \ /\ //\ Exploit database separated by exploit 0 0 // type local, remote, DoS, etc. 1 1 1 0 + Site : 1337day.com 0 1 + Support e-mail :...
Razor CMS v1.2 <= Multiple File Disclosure Vulnerabilites
Exploit for php platform in category web applications 1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=0 0 1 1 /' \ /'\ /\ \ /'\ 0 0 /, \ /\/\ \ \ \ \ ,/\ /\ \ 1 1 //\ \ /' \ /\ //\ Exploit database separated by exploit 0 0 // type local, remote, DoS, etc. 1 1 1 0 +...
Razor CMS 1.1 Path Disclosure
Vulnerability ID: HTB22803 Reference: http://www.htbridge.ch/advisory/pathdisclosureinrazorcms.html Product: Razor CMS Vendor: http://www.razorcms.co.uk http://www.razorcms.co.uk Vulnerable Version: 1.1 Vendor Notification: 18 January 2011 Vulnerability Type: Path disclosure Status: Awaiting Vend...
HTB22803: Path disclosure in Razor CMS
Vulnerability ID: HTB22803 Reference: http://www.htbridge.ch/advisory/pathdisclosureinrazorcms.html Product: Razor CMS Vendor: http://www.razorcms.co.uk http://www.razorcms.co.uk Vulnerable Version: 1.1 Vendor Notification: 18 January 2011 Vulnerability Type: Path disclosure Status: Awaiting Vend...
Razor CMS 1.0 Stable Cross Site Scripting
Vulnerability ID: HTB22376 Reference: http://www.htbridge.ch/advisory/xssvulnerabilityinrazorcms.html Product: razorCMS Vendor: morgan integrated systems limited Vulnerable Version: 1.0 stable Vendor Notification: 10 May 2010 Vulnerability Type: XSS Cross Site Scripting Status: Fixed by Vendor Ri...
Gentoo Security Advisory GLSA 200506-17 (SpamAssassin, Vipul's Razor)
The remote host is missing updates announced in advisory GLSA 200506-17. SPDX-FileCopyrightText: 2008 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
razorcommerce-sql.txt
. . | / | | \ \ | / / |\ \ \ |/ // / /\ \ / |/ \ / // | / | | / \ /|\ / / / / \ / \ / / / \ | | /\ /\ / \ | \ // est.2007 / / forum.darkc0de.com --d3hydr8 -rsauron-baltazar -sinner01 -C1c4Tr1Z - beenu ---QKrun1x-P47tr1ck - FeDeReR -MAGE -JeTFyrE and all darkc0de members ---...
FreeBSD Ports: razor-agents
The remote host is missing an update to the system as announced in the referenced advisory. SPDX-FileCopyrightText: 2008 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...