high8.8Public exploit code
CVE-2018-7746
An issue was discovered in Western Bridge Cobub Razor 0.7.2.
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- Cobub Razor 0.7.2 - Cross-Site Request Forgery2018-04-06 · webapps · php · Verified
Impact
An issue was discovered in Western Bridge Cobub Razor 0.7.2. Authentication is not required for /index.php?/manage/channel/modifychannel. For example, with a crafted channel name, stored XSS is triggered during a later /index.php?/manage/channel request by an admin.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Cobub | Razor | Version 0.7.2 |