Read the docs

XODA

Records1All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical1CVSS 9.0–10.0
CVSS high0CVSS 7.0–8.9

Exploited now

XODA records in CISA KEV

No XODA vulnerabilities are listed in CISA KEV.

Records

1 record

TI-2012-05468 CVE-2012-10045 · GHSA-xqrc-jpv5-hccp

XODA 0.4.5 Arbitrary PHP File Upload

Priority HIGH 81

XODA version 0.4.5 contains an unauthenticated file upload vulnerability that allows remote attackers to execute arbitrary PHP code on the server.

CVSS 4.0CRITICAL 9.3 Network No auth No interaction EPSS 0.01776 Published 2025-08-08 No fix listed CWE-434
Open these records in search →