TI-2023-06258 CVE-2023-6853 · GHSA-wh33-v2x8-3h4r
kalcaddle KodExplorer app.php index server-side request forgery
Priority HIGH 75
A vulnerability classified as critical was found in kalcaddle KodExplorer up to 4.51.03.
kalcaddle
Records44All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical8CVSS 9.0–10.0
CVSS high5CVSS 7.0–8.9
Exploited now
kalcaddle records in CISA KEVNo kalcaddle vulnerabilities are listed in CISA KEV.
Components
Products in the NVD configurations · select one to filter the recordsRecords
44 records
TI-2026-15344 CVE-2026-18720 · GHSA-mv6j-rvc6-f296
kalcaddle kodbox msgWarning Plugin action improper authorization
Priority HIGH 70
A flaw has been found in kalcaddle kodbox 1.67 Build 02.
TI-2024-34218 CVE-2024-51037 · GHSA-wx4c-59w2-pw86
An issue in kodbox v.1.52.04 and before allows a remote attacker to obtain sensitive…
Priority MEDIUM 63
An issue in kodbox v.1.52.04 and before allows a remote attacker to obtain sensitive information via the captcha feature in the password reset function.
TI-2026-04926 CVE-2026-5618 · GHSA-582g-j67j-5q79
kalcaddle kodbox shareMake/shareCheck server-side request forgery
Priority MEDIUM 61
A vulnerability was detected in kalcaddle kodbox up to 1.64.
TI-2026-03996 CVE-2026-4592 · GHSA-8f63-r6mw-5h4q
kalcaddle kodbox Password Login index.class.php tfaVerify improper authentication
Priority MEDIUM 61
A security vulnerability has been detected in kalcaddle kodbox 1.64.
TI-2023-27035 CVE-2023-49489 · GHSA-jf62-v9fg-87mj
Reflective Cross Site Scripting (XSS) vulnerability in KodExplorer version 4.51, allows…
Priority MEDIUM 60
Reflective Cross Site Scripting (XSS) vulnerability in KodExplorer version 4.51, allows attackers to obtain sensitive information and escalate privileges via the APP_HOST parameter at config/i18n/en/main.php.
TI-2023-18809 CVE-2023-37153 · GHSA-gjjc-pv92-5mx2
KodExplorer 4.51 contains a Cross-Site Scripting (XSS) vulnerability in the Description…
Priority MEDIUM 60
KodExplorer 4.51 contains a Cross-Site Scripting (XSS) vulnerability in the Description box of the Light App creation feature.
TI-2021-14827 CVE-2021-36646 · GHSA-9pjc-fqj4-xp7g
A Cross Site Scrtpting (XSS) vulnerability in KodExplorer 4.45 allows remote attackers to…
Priority MEDIUM 60
A Cross Site Scrtpting (XSS) vulnerability in KodExplorer 4.45 allows remote attackers to run arbitrary code via /index.php page.
TI-2026-15345 CVE-2026-18721 · GHSA-f83r-6hq8-m7vj
kalcaddle kodbox SSO API Login apiLogin redirect
Priority MEDIUM 57
A vulnerability has been found in kalcaddle kodbox 1.67 Build 02.
TI-2026-05758 CVE-2026-6571 · GHSA-p2wp-hfcj-f5jm
kodcloud KodExplorer systemRole.class.php roleGroupAction authorization
Priority MEDIUM 57
A weakness has been identified in kodcloud KodExplorer up to 4.52.
TI-2026-02186 CVE-2026-2560 · GHSA-m657-v3w3-jr64
kalcaddle kodbox Media File Preview Plugin VideoResize.class.php run os command injection
Priority MEDIUM 57
A vulnerability has been found in kalcaddle kodbox up to 1.64.05.
TI-2026-00799 CVE-2026-1066 · GHSA-998w-jcr6-gwpq
kalcaddle kodbox Compression zip command injection
Priority MEDIUM 57
A vulnerability was detected in kalcaddle kodbox up to 1.61.10.
TI-2025-24530 CVE-2025-34504 · GHSA-cpc7-gw8m-x49f
KodExplorer 4.52 Open Redirect Vulnerability via User Login Endpoint
Priority MEDIUM 57
KodExplorer 4.52 contains an open redirect vulnerability in the user login page that allows attackers to manipulate the 'link' parameter.
TI-2025-10086 CVE-2025-11016 · GHSA-v94g-cc67-f4w5
kalcaddle kodbox index.class.php fileOut path traversal
Priority MEDIUM 57
A security vulnerability has been detected in kalcaddle kodbox up to 1.61.09.
TI-2025-08626 CVE-2025-9414 · GHSA-pvc8-v7rq-qgmp
kalcaddle kodbox Download from Link serverDownload server-side request forgery
Priority MEDIUM 56
A vulnerability was found in kalcaddle kodbox 1.61.
TI-2023-26006 CVE-2023-48028 · GHSA-m2fj-pxhr-mx98
kodbox 1.46.01 has a security flaw that enables user enumeration.
Priority MEDIUM 51
kodbox 1.46.01 has a security flaw that enables user enumeration.
TI-2023-20747 CVE-2023-39691 · GHSA-29f2-q62m-qxwc
An issue discovered in kodbox through 1.43 allows attackers to arbitrarily add…
Priority MEDIUM 50
An issue discovered in kodbox through 1.43 allows attackers to arbitrarily add Administrator accounts via crafted GET request.
TI-2023-06254 CVE-2023-6849 · GHSA-wgmx-pmm5-6g37
kalcaddle kodbox app.php cover server-side request forgery
Priority MEDIUM 50
A vulnerability was found in kalcaddle kodbox up to 1.48.
TI-2023-06253 CVE-2023-6848 · GHSA-2372-3r49-c89c
kalcaddle kodbox index.class.php check command injection
Priority MEDIUM 47
A vulnerability was found in kalcaddle kodbox up to 1.48.
TI-2022-22798 CVE-2022-46154
Arbitrary file access in KodExplorer
Priority MEDIUM 45
Kodexplorer is a chinese language web based file manager and browser based code editor.
TI-2023-06256 CVE-2023-6851 · GHSA-x29m-mj2r-hm54
kalcaddle KodExplorer ZIP Archive app.php unzipList code injection
Priority MEDIUM 44
A vulnerability was found in kalcaddle KodExplorer up to 4.51.03.
TI-2023-06255 CVE-2023-6850 · GHSA-h8rh-83cg-8r44
kalcaddle KodExplorer API Endpoint unrestricted upload
Priority MEDIUM 44
A vulnerability was found in kalcaddle KodExplorer up to 4.51.03.
TI-2023-03366 CVE-2023-3607 · GHSA-v3cq-v27f-j822
kodbox WebConsole Plug-In webconsole.php.txt Execute os command injection
Priority MEDIUM 44
A vulnerability was found in kodbox 1.26.
TI-2023-06257 CVE-2023-6852 · GHSA-v73r-f3cx-pm99
kalcaddle KodExplorer app.php server-side request forgery
Priority MEDIUM 43
A vulnerability classified as critical has been found in kalcaddle KodExplorer up to 4.51.03.
TI-2022-04535 CVE-2022-4944 · GHSA-ph4w-h44m-m735
kalcaddle KodExplorer cross-site request forgery
Priority MEDIUM 43
A vulnerability, which was classified as problematic, has been found in kalcaddle KodExplorer up to 4.49.