Login Request a demo
KO
Product
Kodbox
by Kodcloud · last CVE Jan 17, 2026
14
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Vulnerabilities14In the news0Timeline
Severity mix
Critical 4High 3Medium 7Low 0
Severity
All severities14Critical4High3Medium7Low0
Exploitation
On CISA KEV0Exploited in the wild0
Watch

Add Kodbox to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2023-39691
9.8
1%
Jan 16
An issue discovered in kodbox through 1.43 allows attackers to arbitrarily add Administrator accounts via crafted GET request
Affected: through 1.43
CVE-2023-6849
9.8
1%
Dec 16
kalcaddle kodbox app.php cover server-side request forgery
Affected: before 1.48.04
CVE-2023-6848
9.8
2%
Dec 16
kalcaddle kodbox index.class.php check command injection
Affected: before 1.48.04
CVE-2023-48028
9.8
1%
Nov 17
kodbox 1.46.01 has a security flaw that enables user enumeration
Affected: 1.46.01
CVE-2026-1066
8.8
5%
Jan 17
kalcaddle kodbox Compression zip command injection
Affected: through 1.61.10
CVE-2023-3607
8.0
6%
Jul 10
kodbox WebConsole Plug-In webconsole.php.txt Execute os command injection
Affected: 1.26
CVE-2023-29790
7.5
1%
May 12
kodbox 1.2.x through 1.3.7 has a Sensitive Information Leakage issue
Affected: 1.2.0 through 1.3.7
CVE-2023-52068
6.1
0%
Jan 16
kodbox v1.43 was discovered to contain a cross-site scripting (XSS) vulnerability via the operation and login logs
Affected: 1.43
CVE-2023-29791
6.1
0%
May 11
kodbox <= 1.37 is vulnerable to Cross Site Scripting (XSS) via the debug information
Affected: through 1.37
CVE-2023-52069
5.4
0%
Jan 17
kodbox v1.49.04 was discovered to contain a cross-site scripting (XSS) vulnerability via the URL parameter
Affected: 1.49.04
CVE-2023-45998
5.4
0%
Oct 23
kodbox 1.44 is vulnerable to Cross Site Scripting (XSS)
Affected: 1.44
CVE-2024-51037
5.3
0%
Nov 15
An issue in kodbox v.1.52.04 and before allows a remote attacker to obtain sensitive information via the captcha feature in the password reset function
Affected: through 1.52.04
CVE-2025-9414
4.9
0%
Aug 25
kalcaddle kodbox Download from Link serverDownload server-side request forgery
Affected: 1.61
CVE-2025-10233
4.3
0%
Sep 10
kalcaddle kodbox editor.class.php fileSave path traversal
Affected: 1.61
Showing 14