CVE-2024-28421

A SQL Injection vulnerability exists in Razor version 0.8.0 , an open-source mobile analytics system. A remote attacker can exploit the ChannelModel::updateapk method within the channelmodle.php file to achieve privilege escalation . To mitigate this risk until a patch is released, it is recommen...

PT-2024-22425

Name of the Vulnerable Software and Affected Versions Razor version 0.8.0 Description The issue allows a remote attacker to escalate privileges via the ChannelModel::updateapk method of the channelmodle.php. This is a SQL Injection vulnerability. Recommendations For Razor version 0.8.0, consider...