TI-2023-06258 CVE-2023-6853 · GHSA-wh33-v2x8-3h4r
kalcaddle KodExplorer app.php index server-side request forgery
Priority HIGH 75
A vulnerability classified as critical was found in kalcaddle KodExplorer up to 4.51.03.
kalcaddle
Records44All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical8CVSS 9.0–10.0
CVSS high5CVSS 7.0–8.9
Exploited now
kalcaddle records in CISA KEVNo kalcaddle vulnerabilities are listed in CISA KEV.
Components
Products in the NVD configurations · select one to filter the recordsRecords
10 records in Kodexplorer · all components
TI-2023-27035 CVE-2023-49489 · GHSA-jf62-v9fg-87mj
Reflective Cross Site Scripting (XSS) vulnerability in KodExplorer version 4.51, allows…
Priority MEDIUM 60
Reflective Cross Site Scripting (XSS) vulnerability in KodExplorer version 4.51, allows attackers to obtain sensitive information and escalate privileges via the APP_HOST parameter at config/i18n/en/main.php.
TI-2023-18809 CVE-2023-37153 · GHSA-gjjc-pv92-5mx2
KodExplorer 4.51 contains a Cross-Site Scripting (XSS) vulnerability in the Description…
Priority MEDIUM 60
KodExplorer 4.51 contains a Cross-Site Scripting (XSS) vulnerability in the Description box of the Light App creation feature.
TI-2021-14827 CVE-2021-36646 · GHSA-9pjc-fqj4-xp7g
A Cross Site Scrtpting (XSS) vulnerability in KodExplorer 4.45 allows remote attackers to…
Priority MEDIUM 60
A Cross Site Scrtpting (XSS) vulnerability in KodExplorer 4.45 allows remote attackers to run arbitrary code via /index.php page.
TI-2025-24530 CVE-2025-34504 · GHSA-cpc7-gw8m-x49f
KodExplorer 4.52 Open Redirect Vulnerability via User Login Endpoint
Priority MEDIUM 57
KodExplorer 4.52 contains an open redirect vulnerability in the user login page that allows attackers to manipulate the 'link' parameter.
TI-2022-22798 CVE-2022-46154
Arbitrary file access in KodExplorer
Priority MEDIUM 45
Kodexplorer is a chinese language web based file manager and browser based code editor.
TI-2023-06256 CVE-2023-6851 · GHSA-x29m-mj2r-hm54
kalcaddle KodExplorer ZIP Archive app.php unzipList code injection
Priority MEDIUM 44
A vulnerability was found in kalcaddle KodExplorer up to 4.51.03.
TI-2023-06255 CVE-2023-6850 · GHSA-h8rh-83cg-8r44
kalcaddle KodExplorer API Endpoint unrestricted upload
Priority MEDIUM 44
A vulnerability was found in kalcaddle KodExplorer up to 4.51.03.
TI-2023-06257 CVE-2023-6852 · GHSA-v73r-f3cx-pm99
kalcaddle KodExplorer app.php server-side request forgery
Priority MEDIUM 43
A vulnerability classified as critical has been found in kalcaddle KodExplorer up to 4.51.03.
TI-2022-04535 CVE-2022-4944 · GHSA-ph4w-h44m-m735
kalcaddle KodExplorer cross-site request forgery
Priority MEDIUM 43
A vulnerability, which was classified as problematic, has been found in kalcaddle KodExplorer up to 4.49.