Cobub

Records8All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical2CVSS 9.0–10.0

CVSS high4CVSS 7.0–8.9

Exploited now

Cobub records in CISA KEV

No Cobub vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Razor 8 records HIGH

Records

8 records in Razor · all components

TI-2024-18868 CVE-2024-28421 · GHSA-rhxj-255h-8jc4

SQL Injection vulnerability in Razor 0.8.0 allows a remote attacker to escalate…

HIGH 82

SQL Injection vulnerability in Razor 0.8.0 allows a remote attacker to escalate privileges via the ChannelModel::updateapk method of the channelmodle.php

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.0083 Published 2024-03-25 No fix listed CWE-89

TI-2018-06325 CVE-2018-8770 · GHSA-4788-86m4-464h

Physical path Leakage exists in Western Bridge Cobub Razor 0.8.0 via generate.php…

MEDIUM 58

Physical path Leakage exists in Western Bridge Cobub Razor 0.8.0 via generate.php, controllers/getConfigTest.php, controllers/getUpdateTest.php, controllers/postclientdataTest.php, controllers/posterrorTest.php, controll…

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.59208 Published 2018-03-18 No fix listed CWE-200

TI-2018-05828 CVE-2018-8056 · GHSA-wr3p-8fm9-7f93

Physical path Leakage exists in Western Bridge Cobub Razor 0.8.0 via an invalid…

MEDIUM 47

Physical path Leakage exists in Western Bridge Cobub Razor 0.8.0 via an invalid channel_name parameter to /index.php?/manage/channel/addchannel or a direct request to /export.php.

CVSS 3.0HIGH 7.5 Network No auth No interaction EPSS 0.12728 Published 2018-03-11 No fix listed CWE-200

TI-2018-05588 CVE-2018-7745 · GHSA-vcff-m44g-82c2

An issue was discovered in Western Bridge Cobub Razor 0.7.2.

MEDIUM 47

An issue was discovered in Western Bridge Cobub Razor 0.7.2.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.12034 Published 2018-03-07 No fix listed CWE-287

TI-2019-07585 CVE-2019-10276 · GHSA-w93m-vpf6-mmmj

Western Bridge Cobub Razor 0.8.0 has a file upload vulnerability via the…

MEDIUM 46

Western Bridge Cobub Razor 0.8.0 has a file upload vulnerability via the web/assets/swf/uploadify.php URI, as demonstrated by a .php file with the image/jpeg content type.

CVSS 3.0CRITICAL 9.8 Network No auth No interaction EPSS 0.01797 Published 2019-03-29 No fix listed CWE-434

TI-2018-05589 CVE-2018-7746 · GHSA-v5fj-hw7h-m6rg

An issue was discovered in Western Bridge Cobub Razor 0.7.2.

MEDIUM 44

An issue was discovered in Western Bridge Cobub Razor 0.7.2.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.03133 Published 2018-03-07 No fix listed CWE-352

TI-2018-05566 CVE-2018-7720 · GHSA-7rf8-3vcf-55q4

A cross-site request forgery (CSRF) vulnerability exists in Western Bridge Cobub Razor…

MEDIUM 40

A cross-site request forgery (CSRF) vulnerability exists in Western Bridge Cobub Razor 0.7.2 via /index.php?/user/createNewUser/, resulting in account creation.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.01143 Published 2018-03-07 No fix listed CWE-352

TI-2022-16997 CVE-2022-36747 · GHSA-m287-97qh-jhg2

Razor v0.8.0 was discovered to contain a cross-site scripting (XSS) vulnerability via the function uploadchannel().

LOW 28

Razor v0.8.0 was discovered to contain a cross-site scripting (XSS) vulnerability via the function uploadchannel().

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.00685 Published 2022-08-30 No fix listed CWE-79

Open these records in search →

Critical	2
High	4
Medium	2
Low	0
No CVSS	0