CVE-2024-28421

A SQL Injection vulnerability exists in Razor version 0.8.0 , an open-source mobile analytics system. A remote attacker can exploit the ChannelModel::updateapk method within the channelmodle.php file to achieve privilege escalation . To mitigate this risk until a patch is released, it is recommen...