Kodcloud

Kodbox

14 Schwachstellen gefunden.

Hinweis: Diese Liste kann unvollständig sein. Daten werden ohne Gewähr im Ursprungsformat bereitgestellt.
8.8

CVE-2026-1066

Exploit
  • EPSS 0.25%
  • Veröffentlicht 17.01.2026 21:02:06
  • Zuletzt bearbeitet 27.02.2026 03:50:55

A vulnerability was detected in kalcaddle kodbox up to 1.61.10. This issue affects some unknown processing of the file /?explorer/index/zip of the component Compression Handler. The manipulation results in command injection. The attack may be launche...

4.3

CVE-2025-10233

Exploit
  • EPSS 0.08%
  • Veröffentlicht 10.09.2025 23:02:05
  • Zuletzt bearbeitet 12.09.2025 15:34:55

A security vulnerability has been detected in kalcaddle kodbox 1.61. This affects the function fileGet/fileSave of the file app/controller/explorer/editor.class.php. The manipulation of the argument path leads to path traversal. The attack can be ini...

4.9

CVE-2025-9414

Exploit
  • EPSS 0.03%
  • Veröffentlicht 25.08.2025 18:32:07
  • Zuletzt bearbeitet 12.09.2025 20:25:34

A vulnerability was found in kalcaddle kodbox 1.61. Affected by this vulnerability is an unknown functionality of the file /?explorer/upload/serverDownload of the component Download from Link Handler. Performing manipulation of the argument url resul...

5.3

CVE-2024-51037

Exploit
  • EPSS 0.3%
  • Veröffentlicht 15.11.2024 19:15:07
  • Zuletzt bearbeitet 16.09.2025 13:35:57

An issue in kodbox v.1.52.04 and before allows a remote attacker to obtain sensitive information via the captcha feature in the password reset function.

5.4

CVE-2023-52069

  • EPSS 0.08%
  • Veröffentlicht 17.01.2024 03:15:08
  • Zuletzt bearbeitet 02.06.2025 15:15:25

kodbox v1.49.04 was discovered to contain a cross-site scripting (XSS) vulnerability via the URL parameter.

9.8

CVE-2023-39691

  • EPSS 0.31%
  • Veröffentlicht 16.01.2024 22:15:37
  • Zuletzt bearbeitet 02.06.2025 16:15:24

An issue discovered in kodbox through 1.43 allows attackers to arbitrarily add Administrator accounts via crafted GET request.

6.1

CVE-2023-52068

  • EPSS 0.21%
  • Veröffentlicht 16.01.2024 22:15:37
  • Zuletzt bearbeitet 17.06.2025 16:15:27

kodbox v1.43 was discovered to contain a cross-site scripting (XSS) vulnerability via the operation and login logs.

9.8

CVE-2023-6849

  • EPSS 0.19%
  • Veröffentlicht 16.12.2023 08:15:06
  • Zuletzt bearbeitet 21.11.2024 08:44:40

A vulnerability was found in kalcaddle kodbox up to 1.48. It has been rated as critical. Affected by this issue is the function cover of the file plugins/fileThumb/app.php. The manipulation of the argument path leads to server-side request forgery. T...

9.8

CVE-2023-6848

  • EPSS 0.97%
  • Veröffentlicht 16.12.2023 07:15:44
  • Zuletzt bearbeitet 21.11.2024 08:44:40

A vulnerability was found in kalcaddle kodbox up to 1.48. It has been declared as critical. Affected by this vulnerability is the function check of the file plugins/officeViewer/controller/libreOffice/index.class.php. The manipulation of the argument...

9.8

CVE-2023-48028

Exploit
  • EPSS 0.39%
  • Veröffentlicht 18.11.2023 00:15:07
  • Zuletzt bearbeitet 29.09.2025 14:16:42

kodbox 1.46.01 has a security flaw that enables user enumeration. This problem is present on the login page, where an attacker can identify valid users based on varying response messages, potentially paving the way for a brute force attack.