GCVE - cpe:2.3:a:cobub:razor:0.8.0:*:*:*:*:*:*:*

Approved changes feed: RSS · Atom

cpe:2.3:a:cobub:razor:0.8.0:*:*:*:*:*:*:*

part: a version: 0.8.0 update: *

Vendor	Cobub (`b4d36967-54e8-591e-9dd0-770957c60e83`)
Product	Razor (`e6689efd-4f60-5109-ba78-82582c2f8880`)
Edition	*
Language	*
Software edition	*
Target software	*
Target hardware	*
Other	*

Notes

Imported from NVD CPE 2.0 feed

PURL mappings

PURL	Source	Last updated
`pkg:github/cobub/razor`	purl2cpe	2026-06-01 10:14:43.292646

Vulnerability references

Identifier	cpeApplicability	Submitted	db.gcve.eu details	Rationale
`CVE:CVE-2024-28421`	vulnerable	2026-06-08 06:33:26.973765	Details available SQL Injection vulnerability in Razor 0.8.0 allows a remote attacker to escalate privileges via the ChannelModel::updateapk method of the channelmodle.php Published: 2024-03-25T00:00:00.000Z Updated: 2024-08-05T19:05:21.849Z Open on db.gcve.eu Reference links https://gist.github.com/LioTree/003202727a61c0fb3ec3c948ab5e38f9 https://github.com/cobub/razor/issues/178	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2022-36747`	vulnerable	2026-06-08 05:46:07.691514	Details available Razor v0.8.0 was discovered to contain a cross-site scripting (XSS) vulnerability via the function uploadchannel(). Published: 2022-08-30T21:27:44.000Z Updated: 2024-08-03T10:14:28.151Z Open on db.gcve.eu Reference links https://github.com/cobub/razor/issues/176 https://gist.github.com/enferas/b00038c9add210ab639c13e0729425c9	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2019-10276`	vulnerable	2026-06-08 05:12:23.088911	Details available Western Bridge Cobub Razor 0.8.0 has a file upload vulnerability via the web/assets/swf/uploadify.php URI, as demonstrated by a .php file with the image/jpeg content type. Published: 2019-03-29T06:06:31.000Z Updated: 2024-08-04T22:17:19.742Z Open on db.gcve.eu Reference links https://github.com/cobub/razor/issues/168 https://github.com/kyrie403/Vuln/blob/master/Cobub%20Razor/Cobub%20Razor%20-%20file%20upload%20vulnerability.md	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2018-8770`	vulnerable	2026-06-08 05:12:06.403749	Details available Physical path Leakage exists in Western Bridge Cobub Razor 0.8.0 via generate.php, controllers/getConfigTest.php, controllers/getUpdateTest.php, controllers/postclientdataTest.php, controllers/posterrorTest.php, controllers/posteventTest.php, controllers/posttagTest.php, controllers/postusinglogTest.php, fixtures/Controller_fixt.php, fixtures/Controller_fixt2.php, fixtures/view_fixt2.php, libs/ipTest.php, or models/commonDbfix.php in tests/. Published: 2018-03-18T06:00:00.000Z Updated: 2024-08-05T07:02:26.074Z Open on db.gcve.eu Reference links https://github.com/Kyhvedn/CVE_Description/blob/master/Cobub_Razor_0.8.0_more_physical_path_leakage.md https://www.exploit-db.com/exploits/44495/	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2018-8056`	vulnerable	2026-06-08 05:12:05.146356	Details available Physical path Leakage exists in Western Bridge Cobub Razor 0.8.0 via an invalid channel_name parameter to /index.php?/manage/channel/addchannel or a direct request to /export.php. Published: 2018-03-11T18:00:00.000Z Updated: 2024-08-05T06:46:12.334Z Open on db.gcve.eu Reference links https://github.com/Kyhvedn/CVE_Description/blob/master/Cobub_Razor_0.8.0_physical_path_leakage.md https://github.com/cobub/razor/issues/162 https://www.exploit-db.com/exploits/44495/	Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.

Cobub Razor 0.8.0

Notes

PURL mappings

Vulnerability references

Contribute