github.com
https://github.com/cobub/razor/issues/161 CVE-2018-7746
HIGH
Cobub Razor 0.7.2 - Cross-Site Request Forgery
Record summary
CVE-2018-7746 has a selected CVSS score of 8.8 (high); EIP currently links 1 catalogued exploit.
Description
An issue was discovered in Western Bridge Cobub Razor 0.7.2. Authentication is not required for /index.php?/manage/channel/modifychannel. For example, with a crafted channel name, stored XSS is triggered during a later /index.php?/manage/channel request by an admin.
Description source: CVE List
Exploitation context
Available material
- Catalogued exploits
- 1
Proofs of concept
1Catalogued exploits
ExploitDBCobub Razor 0.7.2 - Cross-Site Request ForgeryExploitDB exploitby ppbNot analyzed1 file
References
3nvd.nist.gov
https://nvd.nist.gov/vuln/detail/CVE-2018-7746 44416exploit
https://www.exploit-db.com/exploits/44416