Razor@0.8.0 Security Vulnerabilities and Issues — Razor@0.8.0 CVE List

Lucene search

CobubRazor0.8.0

5 matches found

CVE•added 2018/03/18 6:29 a.m.•57 views

CVE-2018-8770

Physical path Leakage exists in Western Bridge Cobub Razor 0.8.0 via generate.php, controllers/getConfigTest.php, controllers/getUpdateTest.php, controllers/postclientdataTest.php, controllers/posterrorTest.php, controllers/posteventTest.php, controllers/posttagTest.php, controllers/postusinglogTes...

5.3CVSS5.2AI score0.58047EPSS

CVE•added 2022/08/30 10:15 p.m.•44 views

CVE-2022-36747

Razor v0.8.0 was discovered to contain a cross-site scripting (XSS) vulnerability via the function uploadchannel().

6.1CVSS6AI score0.00225EPSS

CVE•added 2024/03/25 11:15 p.m.•40 views

CVE-2024-28421

SQL Injection vulnerability in Razor 0.8.0 allows a remote attacker to escalate privileges via the ChannelModel::updateapk method of the channelmodle.php

9.8CVSS8.3AI score0.00434EPSS

CVE•added 2018/03/11 6:29 p.m.•32 views

CVE-2018-8056

Physical path Leakage exists in Western Bridge Cobub Razor 0.8.0 via an invalid channel_name parameter to /index.php?/manage/channel/addchannel or a direct request to /export.php.

7.5CVSS7.4AI score0.03098EPSS

CVE•added 2019/03/29 7:29 a.m.•30 views

CVE-2019-10276

Western Bridge Cobub Razor 0.8.0 has a file upload vulnerability via the web/assets/swf/uploadify.php URI, as demonstrated by a .php file with the image/jpeg content type.

9.8CVSS9.5AI score0.00363EPSS