Skip to content

CVE-2018-8057 A SQL Injection vulnerability exists in Western Bridge Cobub Razor 0.8.0 via the channel_name or platform parameter in a /index.php?/manage/channel/addchannel request, related to /application/controll...

CriticalCVSS 9.8 EPSS 21.8% Public exploit
Published
Updated
Exploit status
Public exploit available

Description

A SQL Injection vulnerability exists in Western Bridge Cobub Razor 0.8.0 via the channel_name or platform parameter in a /index.php?/manage/channel/addchannel request, related to /application/controllers/manage/channel.php.

Affected products

ProductAffected versionsFixed in
westernbridgegroup razor = 0.8.0 No fix listed

References

  • github.com exploit issue-tracking third-party-advisory
  • github.com exploit third-party-advisory
  • 44454 exploit third-party-advisory vdb-entry