CVE

CVE-2024-28421

Date: (C)2024-03-26   (M)2024-03-27

SQL Injection vulnerability in Razor 0.8.0 allows a remote attacker to escalate privileges via the ChannelModel::updateapk method of the channelmodle.php

Reference:

https://gist.github.com/LioTree/003202727a61c0fb3ec3c948ab5e38f9

https://github.com/cobub/razor/issues/178