CVE-2018-8056

Published: Mar 11, 2018Modified: Jun 17, 2026

7.5

Vector

CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Exploitability: 3.9 / Impact: 3.6

Source: NVD

Description

Physical path Leakage exists in Western Bridge Cobub Razor 0.8.0 via an invalid channel_name parameter to /index.php?/manage/channel/addchannel or a direct request to /export.php.

Affected (1)

Products: Cobub: Razor

Cobub

1 product

Razor

Configuration A

1 vulnerable

Vulnerable Software	Affected Versions
Cobub Razor	Version 0.8.0

Related CWEs

CWE-200

Exposure of Sensitive Information to an Unauthorized Actor

The product exposes sensitive information to an actor that is not explicitly authorized to have access to that information.

References (6)

https://github.com/Kyhvedn/CVE_Description/blob/master/Cobub_Razor_0.8.0_physical_path_leakage.md

Source: cve@mitre.org

ExploitIssue TrackingThird Party Advisory

https://github.com/cobub/razor/issues/162

Source: cve@mitre.org

ExploitThird Party Advisory

https://www.exploit-db.com/exploits/44495/

Source: cve@mitre.org

ExploitThird Party AdvisoryVDB Entry

https://github.com/Kyhvedn/CVE_Description/blob/master/Cobub_Razor_0.8.0_physical_path_leakage.md

Source: af854a3a-2127-422b-91ae-364da2661108

ExploitIssue TrackingThird Party Advisory

https://github.com/cobub/razor/issues/162

Source: af854a3a-2127-422b-91ae-364da2661108

ExploitThird Party Advisory

https://www.exploit-db.com/exploits/44495/

Source: af854a3a-2127-422b-91ae-364da2661108

ExploitThird Party AdvisoryVDB Entry

Timeline

No history available yet.