cobub kayıtları
cobub üreticisine ait 8 yayımlanmış kayıt.
Araştırmacı profili
- KEV’e giren
- 0 · %0
- Silahlaştırılmış
- 0 · %0
- Pre-auth RCE
- 0
- Düzeltme kaydı olan
- %0
- Yayından KEV’e ortanca
- KEV’e giren kayıt yok
Tekrar eden sınıflar
- CWE-200 Exposure of Sensitive Information to an Unauthorized Actor2
- CWE-79 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')2
- CWE-287 Improper Authentication1
- CWE-352 Cross-Site Request Forgery (CSRF)1
- CWE-434 Unrestricted Upload of File with Dangerous Type1
- CWE-89 Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')1
Bu üreticide en sık görülen zafiyet sınıfları: nereye bakmalı.
CWETüm kayıtlar
8 kayıt| Aksiyon | CVE | Zafiyet | Ciddiyet | KEV | EPSS | Yayın |
|---|---|---|---|---|---|---|
40Planlayın | CVE-2019-10276İstismar yok | Western Bridge Cobub Razor 0.8.0 has a file upload vulnerability via the web/assets/swf/uploadify.php URI, as demonstrated by a .php file wicobub · razor · CWE-434 | Kritik9,8 | — | %1,8 | 29 Mar 2019 |
39İzleyin | CVE-2018-8770Kavram kanıtı | Physical path Leakage exists in Western Bridge Cobub Razor 0.8.0 via generate.php, controllers/getConfigTest.php, controllers/getUpdateTest.cobub · razor · CWE-200 | Orta5,3 | — | %59,2 | 18 Mar 2018 |
39İzleyin | CVE-2024-28421İstismar yok | SQL Injection vulnerability in Razor 0.8.0 allows a remote attacker to escalate privileges via the ChannelModel::updateapk method of the chacobub · razor · CWE-89 | Kritik9,8 | — | %0,8 | 25 Mar 2024 |
36İzleyin | CVE-2018-7746Kavram kanıtı | An issue was discovered in Western Bridge Cobub Razor 0.7.2.cobub · razor · CWE-79 | Yüksek8,8 | — | %3,1 | 7 Mar 2018 |
35İzleyin | CVE-2018-7720İstismar yok | A cross-site request forgery (CSRF) vulnerability exists in Western Bridge Cobub Razor 0.7.2 via /index.php?/user/createNewUser/, resulting cobub · razor · CWE-352 | Yüksek8,8 | — | %1,1 | 7 Mar 2018 |
34İzleyin | CVE-2018-8056Kavram kanıtı | Physical path Leakage exists in Western Bridge Cobub Razor 0.8.0 via an invalid channel_name parameter to /index.php?/manage/channel/addchancobub · razor · CWE-200 | Yüksek7,5 | — | %12,7 | 11 Mar 2018 |
34İzleyin | CVE-2018-7745Kavram kanıtı | An issue was discovered in Western Bridge Cobub Razor 0.7.2.cobub · razor · CWE-287 | Yüksek7,5 | — | %12,0 | 7 Mar 2018 |
24İzleyin | CVE-2022-36747İstismar yok | Razor v0.8.0 was discovered to contain a cross-site scripting (XSS) vulnerability via the function uploadchannel().cobub · razor · CWE-79 | Orta6,1 | — | %0,7 | 30 Ağu 2022 |
- CVE-2019-1027640Planlayın
Western Bridge Cobub Razor 0.8.0 has a file upload vulnerability via the web/assets/swf/uploadify.php URI, as demonstrated by a .php file wi
KritikCVSS 9,8İstismar yokEPSS %2cobub · razor29 Mar 2019
- CVE-2018-877039İzleyin
Physical path Leakage exists in Western Bridge Cobub Razor 0.8.0 via generate.php, controllers/getConfigTest.php, controllers/getUpdateTest.
OrtaCVSS 5,3Kavram kanıtıEPSS %59cobub · razor18 Mar 2018
- CVE-2024-2842139İzleyin
SQL Injection vulnerability in Razor 0.8.0 allows a remote attacker to escalate privileges via the ChannelModel::updateapk method of the cha
KritikCVSS 9,8İstismar yokEPSS %1cobub · razor25 Mar 2024
- CVE-2018-774636İzleyin
An issue was discovered in Western Bridge Cobub Razor 0.7.2.
YüksekCVSS 8,8Kavram kanıtıEPSS %3cobub · razor7 Mar 2018
- CVE-2018-772035İzleyin
A cross-site request forgery (CSRF) vulnerability exists in Western Bridge Cobub Razor 0.7.2 via /index.php?/user/createNewUser/, resulting
YüksekCVSS 8,8İstismar yokEPSS %1cobub · razor7 Mar 2018
- CVE-2018-805634İzleyin
Physical path Leakage exists in Western Bridge Cobub Razor 0.8.0 via an invalid channel_name parameter to /index.php?/manage/channel/addchan
YüksekCVSS 7,5Kavram kanıtıEPSS %13cobub · razor11 Mar 2018
- CVE-2018-774534İzleyin
An issue was discovered in Western Bridge Cobub Razor 0.7.2.
YüksekCVSS 7,5Kavram kanıtıEPSS %12cobub · razor7 Mar 2018
- CVE-2022-3674724İzleyin
Razor v0.8.0 was discovered to contain a cross-site scripting (XSS) vulnerability via the function uploadchannel().
OrtaCVSS 6,1İstismar yokEPSS %1cobub · razor30 Ağu 2022