CVE-2018-8770

MEDIUMNuclei

Cobub Razor 0.8.0 - Physical Path Leakage

Title source: exploit-db.com
Search associated code STIX 2.1 vulnerability STIX 2.1 with PoCs

Record summary

CVE-2018-8770 has a selected CVSS score of 5.3 (medium); EIP currently links 1 catalogued exploit and 1 Nuclei template.

Description

Physical path Leakage exists in Western Bridge Cobub Razor 0.8.0 via generate.php, controllers/getConfigTest.php, controllers/getUpdateTest.php, controllers/postclientdataTest.php, controllers/posterrorTest.php, controllers/posteventTest.php, controllers/posttagTest.php, controllers/postusinglogTest.php, fixtures/Controller_fixt.php, fixtures/Controller_fixt2.php, fixtures/view_fixt2.php, libs/ipTest.php, or models/commonDbfix.php in tests/.

Description source: CVE List

Exploitation context

Available material

Catalogued exploits
1
Nuclei templates
1

Proofs of concept

1

Catalogued exploits

ExploitDBCobub Razor 0.8.0 - Physical Path LeakageExploitDB exploitby KyhvednNot analyzed1 file

linked to 2 vulnerabilities

ExploitDB
PoC details

Nuclei templates

1
ProjectDiscoveryMEDIUMCobub Razor 0.8.0 - Information DisclosureCVSS 5.3

Cobub Razor 0.8.0 is susceptible to information disclosure via generate.php, controllers/getConfigTest.php, controllers/getUpdateTest.php, controllers/postclientdataTest.php, controllers/posterrorTest.php, controllers/posteventTest.php, controllers/posttagTest.php, controllers/postusinglogTest.php, fixtures/Controller_fixt.php, fixtures/Controller_fixt2.php, fixtures/view_fixt2.php, libs/ipTest.php, or models/commonDbfix.php. An attacker can obtain sensitive information, modify data, and/or execute unauthorized operations.

Impact

An attacker can exploit this vulnerability to gain sensitive information.

Remediation

Upgrade to a patched version of Cobub Razor.

WeaknessesCWE-200
Authorsprincechaddha
Template tagscvecve2018cobubrazorexposureedbvuln
CVSS vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
CPE: cpe:2.3:a:cobub:razor:0.8.0:*:*:*:*:*:*:*
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-8770 https://www.exploit-db.com/exploits/44495/ https://github.com/Kyhvedn/CVE_Description/blob/master/Cobub_Razor_0.8.0_more_physical_path_leakage.md https://nvd.nist.gov/vuln/detail/CVE-2018-8770 https://github.com/ARPSyndicate/kenzer-templates

Source: ProjectDiscovery

References

3