Vulnerabilities

TI-2026-80140 CVE-2026-116057 · GHSA-2665-vr3c-wrc2

Unrestricted file upload in KodCloud KodExplorer online editor

LOW 24

A vulnerability has been found in KodCloud KodExplorer up to 4.55.

CVSS 4.0MEDIUM 5.3 Network Low privileges No interaction EPSS 0.00333 Published 2026-10-25 No fix listed CWE-284

TI-2026-80139 CVE-2026-116056 · GHSA-mm82-7x4g-wvpv

Server-side request forgery in KodCloud KodExplorer Remote Download

LOW 24

A flaw has been found in KodCloud KodExplorer up to 4.56.

CVSS 4.0MEDIUM 5.3 Network Low privileges No interaction EPSS 0.00362 Published 2026-10-25 No fix listed CWE-918

TI-2026-70047 CVE-2026-104081

Path traversal in KodExplorer ZIP extraction lets attackers overwrite files

LOW 35

KodExplorer before 4.55 contains a path traversal vulnerability in the unzip_pre_name() function within app/function/helper.function.php, where a single non-recursive str_replace() sanitization pass can be bypassed using…

CVSS 4.0HIGH 7.2 Network Low privileges No interaction EPSS 0.00767 Published 2026-10-09 Fixed in 4.55 CWE-22

TI-2026-15345 CVE-2026-18721 · GHSA-f83r-6hq8-m7vj

kalcaddle kodbox SSO API Login apiLogin redirect

MEDIUM 57

A vulnerability has been found in kalcaddle kodbox 1.67 Build 02.

CVSS 4.0MEDIUM 5.3 Network No auth User interaction EPSS 0.00425 Published 2026-08-04 No fix listed CWE-601

TI-2026-15344 CVE-2026-18720 · GHSA-mv6j-rvc6-f296

kalcaddle kodbox msgWarning Plugin action improper authorization

HIGH 70

A flaw has been found in kalcaddle kodbox 1.67 Build 02.

CVSS 4.0MEDIUM 6.9 Network No auth No interaction EPSS 0.00483 Published 2026-08-04 No fix listed CWE-266

TI-2026-07692 CVE-2026-8753 · GHSA-83hf-596r-v39j

kalcaddle Kodbox fileThumb Plugin VideoResize.class.php parseVideoInfo command injection

LOW 28

A security vulnerability has been detected in kalcaddle Kodbox up to 1.64.

CVSS 4.0MEDIUM 5.3 Network Low privileges No interaction EPSS 0.01945 Published 2026-05-17 No fix listed CWE-74

TI-2026-05758 CVE-2026-6571 · GHSA-p2wp-hfcj-f5jm

kodcloud KodExplorer systemRole.class.php roleGroupAction authorization

MEDIUM 57

A weakness has been identified in kodcloud KodExplorer up to 4.52.

CVSS 4.0MEDIUM 5.3 Network Low privileges No interaction EPSS 0.0027 Published 2026-04-19 No fix listed CWE-285

TI-2026-05757 CVE-2026-6570 · GHSA-jfxq-p7rj-52hh

kodcloud KodExplorer systemMember.class.php initInstall authorization

LOW 23

A security flaw has been discovered in kodcloud KodExplorer up to 4.52.

CVSS 4.0MEDIUM 5.1 Network High privileges No interaction EPSS 0.00301 Published 2026-04-19 No fix listed CWE-285

TI-2026-05756 CVE-2026-6569 · GHSA-9782-qgv6-6p8g

kodcloud KodExplorer fileGet Endpoint share.class.php improper authentication

LOW 37

A vulnerability was identified in kodcloud KodExplorer up to 4.52.

CVSS 4.0MEDIUM 6.9 Network No auth No interaction EPSS 0.00414 Published 2026-04-19 No fix listed CWE-287

TI-2026-05755 CVE-2026-6568 · GHSA-rgfh-mp7v-25f9

kodcloud KodExplorer Public Share share.class.php initShareOld path traversal

LOW 37

A vulnerability was determined in kodcloud KodExplorer up to 4.52.

CVSS 4.0MEDIUM 6.9 Network No auth No interaction EPSS 0.00513 Published 2026-04-19 No fix listed CWE-22

TI-2026-04926 CVE-2026-5618 · GHSA-582g-j67j-5q79

kalcaddle kodbox shareMake/shareCheck server-side request forgery

MEDIUM 61

A vulnerability was detected in kalcaddle kodbox up to 1.64.

CVSS 4.0MEDIUM 6.3 Network No auth No interaction EPSS 0.00328 Published 2026-04-06 No fix listed CWE-918

TI-2026-04214 CVE-2026-4831 · GHSA-8hrp-4v5x-m9q3

kalcaddle kodbox Password-protected Share auth.class.php can improper authentication

LOW 29

A security flaw has been discovered in kalcaddle kodbox 1.64.

CVSS 4.0MEDIUM 6.3 Network No auth No interaction EPSS 0.00488 Published 2026-03-26 No fix listed CWE-287

TI-2026-04213 CVE-2026-4830 · GHSA-264f-3frq-cpxq

kalcaddle kodbox Public Share userShare.class.php add privilege escalation

LOW 28

A vulnerability was identified in kalcaddle kodbox 1.64.

CVSS 4.0MEDIUM 6.3 Network No auth No interaction EPSS 0.00262 Published 2026-03-26 No fix listed CWE-284

TI-2026-03996 CVE-2026-4592 · GHSA-8f63-r6mw-5h4q

kalcaddle kodbox Password Login index.class.php tfaVerify improper authentication

MEDIUM 61

A security vulnerability has been detected in kalcaddle kodbox 1.64.

CVSS 4.0MEDIUM 6.3 Network No auth No interaction EPSS 0.00361 Published 2026-03-23 No fix listed CWE-287

TI-2026-03995 CVE-2026-4591 · GHSA-rjfv-p85j-26xf

kalcaddle kodbox fileThumb Endpoint app.php checkBin os command injection

LOW 29

A weakness has been identified in kalcaddle kodbox 1.64.

CVSS 4.0MEDIUM 5.1 Network High privileges No interaction EPSS 0.03505 Published 2026-03-23 No fix listed CWE-77

TI-2026-03994 CVE-2026-4590 · GHSA-9gjx-rgv5-g8mx

kalcaddle kodbox loginSubmit API index.class.php cross-site request forgery

LOW 11

A security flaw has been discovered in kalcaddle kodbox 1.64.

CVSS 4.0LOW 2.3 Network No auth User interaction EPSS 0.00151 Published 2026-03-23 No fix listed CWE-352

TI-2026-03993 CVE-2026-4589 · GHSA-f28j-gx5r-p78j

kalcaddle kodbox fileGet Endpoint editor.class.php PathDriverUrl server-side request forgery

LOW 23

A vulnerability was identified in kalcaddle kodbox 1.64.

CVSS 4.0MEDIUM 5.3 Network Low privileges No interaction EPSS 0.00209 Published 2026-03-23 No fix listed CWE-918

TI-2026-03992 CVE-2026-4588 · GHSA-ggx8-fr26-x696

kalcaddle kodbox Site-level API key shareOut.class.php shareSafeGroup hard-coded key

LOW 28

A vulnerability was determined in kalcaddle kodbox 1.64.

CVSS 4.0MEDIUM 6.3 Network No auth No interaction EPSS 0.00279 Published 2026-03-23 No fix listed CWE-320

TI-2026-02186 CVE-2026-2560 · GHSA-m657-v3w3-jr64

kalcaddle kodbox Media File Preview Plugin VideoResize.class.php run os command injection

MEDIUM 57

A vulnerability has been found in kalcaddle kodbox up to 1.64.05.

CVSS 4.0MEDIUM 5.3 Network Low privileges No interaction EPSS 0.02587 Published 2026-02-16 No fix listed CWE-77

TI-2026-00799 CVE-2026-1066 · GHSA-998w-jcr6-gwpq

kalcaddle kodbox Compression zip command injection

MEDIUM 57

A vulnerability was detected in kalcaddle kodbox up to 1.61.10.

CVSS 4.0MEDIUM 5.3 Network Low privileges No interaction EPSS 0.05471 Published 2026-01-17 No fix listed CWE-74

TI-2025-24530 CVE-2025-34504 · GHSA-cpc7-gw8m-x49f

KodExplorer 4.52 Open Redirect Vulnerability via User Login Endpoint

MEDIUM 57

KodExplorer 4.52 contains an open redirect vulnerability in the user login page that allows attackers to manipulate the 'link' parameter.

CVSS 4.0MEDIUM 5.3 Network No auth User interaction EPSS 0.00321 Published 2025-12-11 No fix listed CWE-601

TI-2025-10086 CVE-2025-11016 · GHSA-v94g-cc67-f4w5

kalcaddle kodbox index.class.php fileOut path traversal

MEDIUM 57

A security vulnerability has been detected in kalcaddle kodbox up to 1.61.09.

CVSS 4.0MEDIUM 5.3 Network Low privileges No interaction EPSS 0.00472 Published 2025-09-26 No fix listed CWE-22

TI-2025-09394 CVE-2025-10233 · GHSA-xj93-7p7p-ffqh

kalcaddle kodbox editor.class.php fileSave path traversal

LOW 24

A security vulnerability has been detected in kalcaddle kodbox 1.61.

CVSS 4.0MEDIUM 5.3 Network Low privileges No interaction EPSS 0.00455 Published 2025-09-10 No fix listed CWE-22

TI-2025-08626 CVE-2025-9414 · GHSA-pvc8-v7rq-qgmp

kalcaddle kodbox Download from Link serverDownload server-side request forgery

MEDIUM 56

A vulnerability was found in kalcaddle kodbox 1.61.

CVSS 4.0MEDIUM 5.1 Network High privileges No interaction EPSS 0.00313 Published 2025-08-25 No fix listed CWE-918

TI-2024-34218 CVE-2024-51037 · GHSA-wx4c-59w2-pw86

An issue in kodbox v.1.52.04 and before allows a remote attacker to obtain sensitive…

MEDIUM 63

An issue in kodbox v.1.52.04 and before allows a remote attacker to obtain sensitive information via the captcha feature in the password reset function.

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.00276 Published 2024-11-15 No fix listed CWE-346

Vulnerabilities

Filters