Codiad

Records14All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical3CVSS 9.0–10.0

CVSS high6CVSS 7.0–8.9

Exploited now

Codiad records in CISA KEV

No Codiad vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Codiad 14 records HIGH

Records

14 records in Codiad · all components

TI-2018-10126 CVE-2018-14009 · GHSA-584h-jhxh-pxp2

Codiad through 2.8.4 allows Remote Code Execution, a different vulnerability than CVE-2017-11366 and CVE-2017-15689.

HIGH 69

Codiad through 2.8.4 allows Remote Code Execution, a different vulnerability than CVE-2017-11366 and CVE-2017-15689.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.38046 Published 2018-07-12 No fix listed CWE-20

TI-2019-13840 CVE-2019-19208 · GHSA-v92m-hhhw-vv9v

Codiad Web IDE through 2.8.4 allows PHP Code injection.

MEDIUM 60

Codiad Web IDE through 2.8.4 allows PHP Code injection.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.19241 Published 2020-03-16 No fix listed CWE-94

TI-2017-08403 CVE-2017-11366 · GHSA-jccv-3h4x-35mv

components/filemanager/class.filemanager.php in Codiad before 2.8.4 is vulnerable to…

MEDIUM 52

components/filemanager/class.filemanager.php in Codiad before 2.8.4 is vulnerable to remote command execution because shell commands can be embedded in parameter values, as demonstrated by search_file_type.

CVSS 3.0CRITICAL 9.8 Network No auth No interaction EPSS 0.07547 Published 2017-08-21 Fixed in 2.8.3 CWE-78

TI-2018-13754 CVE-2018-19423 · GHSA-x4c6-q57w-ffwg

Codiad 2.8.4 allows remote authenticated administrators to execute arbitrary code by uploading an executable file.

MEDIUM 49

Codiad 2.8.4 allows remote authenticated administrators to execute arbitrary code by uploading an executable file.

CVSS 3.1HIGH 7.2 Network High privileges No interaction EPSS 0.18125 Published 2018-11-21 No fix listed CWE-434

TI-2020-11002 CVE-2020-14043 · GHSA-35gp-jxw8-xw6h

PRODUCT NOT SUPPORTED WHEN ASSIGNED A Cross Side Request Forgery (CSRF)…

MEDIUM 41

** PRODUCT NOT SUPPORTED WHEN ASSIGNED ** A Cross Side Request Forgery (CSRF) vulnerability was found in Codiad v1.7.8 and later.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.01549 Published 2020-08-24 No fix listed CWE-352

TI-2020-11003 CVE-2020-14044 · GHSA-c3q8-hh69-7mg5

PRODUCT NOT SUPPORTED WHEN ASSIGNED A Server-Side Request Forgery (SSRF)…

LOW 37

** PRODUCT NOT SUPPORTED WHEN ASSIGNED ** A Server-Side Request Forgery (SSRF) vulnerability was found in Codiad v1.7.8 and later.

CVSS 3.1HIGH 7.2 Network High privileges No interaction EPSS 0.03219 Published 2020-08-24 No fix listed CWE-918

TI-2020-14542 CVE-2020-23355 · GHSA-8fhh-hf9w-55p7

PRODUCT NOT SUPPORTED WHEN ASSIGNED Codiad 2.8.4…

LOW 35

** PRODUCT NOT SUPPORTED WHEN ASSIGNED ** Codiad 2.8.4 /componetns/user/class.user.php:Authenticate() is vulnerable in magic hash authentication bypass.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00997 Published 2021-01-27 No fix listed CWE-287

TI-2017-14460 CVE-2017-1000125 · GHSA-hjgm-hqw5-jg63

Codiad(full version) is vulnerable to write anything to configure file in the installation resulting upload a webshell.

LOW 35

Codiad(full version) is vulnerable to write anything to configure file in the installation resulting upload a webshell.

CVSS 3.0HIGH 7.5 Network No auth No interaction EPSS 0.00922 Published 2017-11-17 No fix listed CWE-732

TI-2017-14244 CVE-2017-20178 · GHSA-2q79-56rq-8v3c

Codiad process.php saveJSON information disclosure

LOW 34

** UNSUPPORTED WHEN ASSIGNED ** A vulnerability was found in Codiad 2.8.0.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00682 Published 2023-02-21 Fixed in 2.8.1 CWE-200

TI-2020-11001 CVE-2020-14042 · GHSA-g2x4-256v-5pvx

PRODUCT NOT SUPPORTED WHEN ASSIGNED A Cross Site Scripting (XSS) vulnerability was…

LOW 30

** PRODUCT NOT SUPPORTED WHEN ASSIGNED ** A Cross Site Scripting (XSS) vulnerability was found in Codiad v1.7.8 and later.

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.01172 Published 2020-08-25 No fix listed CWE-79

TI-2014-07778 CVE-2014-9581 · GHSA-pcxg-9mqj-2f8c

Directory traversal vulnerability in components/filemanager/download.php in Codiad 2.4.3…

LOW 29

Directory traversal vulnerability in components/filemanager/download.php in Codiad 2.4.3 allows remote attackers to read arbitrary files via a ..

CVSS 2.0MEDIUM 5.0 Network No auth Interaction — EPSS 0.03582 Published 2015-01-08 No fix listed CWE-22

TI-2024-17458 CVE-2024-26557 · GHSA-854j-h67v-pp6q

Codiad v2.8.4 allows reflected XSS via the components/market/dialog.php type parameter.

LOW 24

Codiad v2.8.4 allows reflected XSS via the components/market/dialog.php type parameter.

CVSS 3.1MEDIUM 5.4 Network Low privileges User interaction EPSS 0.00343 Published 2024-03-22 No fix listed CWE-79

TI-2013-05925 CVE-2013-7257 · GHSA-ph34-w4q7-r328

Cross-site scripting (XSS) vulnerability in Codiad 2.0.7 allows remote attackers to…

LOW 24

Cross-site scripting (XSS) vulnerability in Codiad 2.0.7 allows remote attackers to inject arbitrary web script or HTML via the Project Name field.

CVSS 2.0MEDIUM 4.3 Network No auth Interaction — EPSS 0.01927 Published 2014-01-02 No fix listed CWE-79

TI-2014-07779 CVE-2014-9582 · GHSA-g8hh-vx96-cp8q

Cross-site scripting (XSS) vulnerability in components/filemanager/dialog.php in Codiad…

LOW 23

Cross-site scripting (XSS) vulnerability in components/filemanager/dialog.php in Codiad 2.4.3 allows remote attackers to inject arbitrary web script or HTML via the short_name parameter in a rename action.

CVSS 2.0MEDIUM 4.3 Network No auth Interaction — EPSS 0.01474 Published 2015-01-08 No fix listed CWE-79

Open these records in search →

Critical	3
High	6
Medium	5
Low	0
No CVSS	0