cobub records

8 published records for vendor cobub.

Researcher profile

Entered KEV: 0 · 0%
Weaponized: 0 · 0%
Pre-auth RCE: 0
With a fix record: 0%
Median publish → KEV: No record has entered KEV

Records by year

Bar: total · dark part: CISA KEV.

Recurring classes

The weakness classes this vendor ships most often: where to look.

Attack profile

All records

8 records

CVE records
Action	CVE	Vulnerability	Severity	KEV	EPSS	Published
40Plan	CVE-2019-10276No exploit	Western Bridge Cobub Razor 0.8.0 has a file upload vulnerability via the web/assets/swf/uploadify.php URI, as demonstrated by a .php file wicobub · razor · CWE-434 Pre-auth File upload	Critical9.8	—	1.7%	Mar 29, 2019
39Monitor	CVE-2018-8770Proof of concept	Physical path Leakage exists in Western Bridge Cobub Razor 0.8.0 via generate.php, controllers/getConfigTest.php, controllers/getUpdateTest.cobub · razor · CWE-200 Pre-auth Info leak	Medium5.3	—	59.2%	Mar 18, 2018
39Monitor	CVE-2024-28421No exploit	SQL Injection vulnerability in Razor 0.8.0 allows a remote attacker to escalate privileges via the ChannelModel::updateapk method of the chacobub · razor · CWE-89 Pre-auth SQL injection	Critical9.8	—	0.8%	Mar 25, 2024
36Monitor	CVE-2018-7746Proof of concept	An issue was discovered in Western Bridge Cobub Razor 0.7.2.cobub · razor · CWE-79 Pre-auth XSS	High8.8	—	3.1%	Mar 7, 2018
35Monitor	CVE-2018-7720No exploit	A cross-site request forgery (CSRF) vulnerability exists in Western Bridge Cobub Razor 0.7.2 via /index.php?/user/createNewUser/, resulting cobub · razor · CWE-352 Pre-auth CSRF	High8.8	—	1.1%	Mar 7, 2018
34Monitor	CVE-2018-8056Proof of concept	Physical path Leakage exists in Western Bridge Cobub Razor 0.8.0 via an invalid channel_name parameter to /index.php?/manage/channel/addchancobub · razor · CWE-200 Pre-auth Info leak	High7.5	—	12.7%	Mar 11, 2018
34Monitor	CVE-2018-7745Proof of concept	An issue was discovered in Western Bridge Cobub Razor 0.7.2.cobub · razor · CWE-287 Pre-auth Auth bypass	High7.5	—	12.0%	Mar 7, 2018
24Monitor	CVE-2022-36747No exploit	Razor v0.8.0 was discovered to contain a cross-site scripting (XSS) vulnerability via the function uploadchannel().cobub · razor · CWE-79 Pre-auth XSS	Medium6.1	—	0.6%	Aug 30, 2022

CVE-2019-10276
40Plan
Western Bridge Cobub Razor 0.8.0 has a file upload vulnerability via the web/assets/swf/uploadify.php URI, as demonstrated by a .php file wi
CriticalCVSS 9.8No exploitEPSS 1%
- Pre-auth
- File upload
cobub · razorMar 29, 2019
CVE-2018-8770
39Monitor
Physical path Leakage exists in Western Bridge Cobub Razor 0.8.0 via generate.php, controllers/getConfigTest.php, controllers/getUpdateTest.
MediumCVSS 5.3Proof of conceptEPSS 59%
- Pre-auth
- Info leak
cobub · razorMar 18, 2018
CVE-2024-28421
39Monitor
SQL Injection vulnerability in Razor 0.8.0 allows a remote attacker to escalate privileges via the ChannelModel::updateapk method of the cha
CriticalCVSS 9.8No exploitEPSS 0%
- Pre-auth
- SQL injection
cobub · razorMar 25, 2024
CVE-2018-7746
36Monitor
An issue was discovered in Western Bridge Cobub Razor 0.7.2.
HighCVSS 8.8Proof of conceptEPSS 3%
- Pre-auth
- XSS
cobub · razorMar 7, 2018
CVE-2018-7720
35Monitor
A cross-site request forgery (CSRF) vulnerability exists in Western Bridge Cobub Razor 0.7.2 via /index.php?/user/createNewUser/, resulting
HighCVSS 8.8No exploitEPSS 1%
- Pre-auth
- CSRF
cobub · razorMar 7, 2018
CVE-2018-8056
34Monitor
Physical path Leakage exists in Western Bridge Cobub Razor 0.8.0 via an invalid channel_name parameter to /index.php?/manage/channel/addchan
HighCVSS 7.5Proof of conceptEPSS 12%
- Pre-auth
- Info leak
cobub · razorMar 11, 2018
CVE-2018-7745
34Monitor
An issue was discovered in Western Bridge Cobub Razor 0.7.2.
HighCVSS 7.5Proof of conceptEPSS 12%
- Pre-auth
- Auth bypass
cobub · razorMar 7, 2018
CVE-2022-36747
24Monitor
Razor v0.8.0 was discovered to contain a cross-site scripting (XSS) vulnerability via the function uploadchannel().
MediumCVSS 6.1No exploitEPSS 0%
- Pre-auth
- XSS
cobub · razorAug 30, 2022