KO
Vendor
kodcloud
30
CVEs
0
On KEV
2
New 30D
Products
Recent CVEs
| CVE | Product | CVSS | Published | Summary |
|---|---|---|---|---|
| CVE-2026-116057 New | KO KodExplorer KodCloud | 6.3 | Oct 25 | KodCloud KodExplorer Online Editor Save Endpoint editor.class.php unrestricted upload |
| CVE-2026-116056 New | KO KodExplorer KodCloud | 6.3 | Oct 25 | KodCloud KodExplorer Remote Download web.function.php request_url_safe server-side request forgery |
| CVE-2026-6571 | KO KodExplorer kodcloud | 6.3 | Apr 19 | kodcloud KodExplorer systemRole.class.php roleGroupAction authorization |
| CVE-2026-6570 | KO KodExplorer kodcloud | 2.7 | Apr 19 | kodcloud KodExplorer systemMember.class.php initInstall authorization |
| CVE-2026-6569 | KO KodExplorer kodcloud | 7.3 | Apr 19 | kodcloud KodExplorer fileGet Endpoint share.class.php improper authentication |
| CVE-2026-6568 | KO KodExplorer kodcloud | 7.3 | Apr 19 | kodcloud KodExplorer Public Share share.class.php initShareOld path traversal |
| CVE-2026-1066 | KO Kodbox Kodcloud | 8.8 | Jan 17 | kalcaddle kodbox Compression zip command injection |
| CVE-2025-34504 | KO KodExplorer kodcloud | 6.1 | Dec 11 | KodExplorer 4.52 Open Redirect Vulnerability via User Login Endpoint |
| CVE-2025-10233 | KO Kodbox Kodcloud | 4.3 | Sep 10 | kalcaddle kodbox editor.class.php fileSave path traversal |
| CVE-2025-9414 | KO Kodbox Kodcloud | 4.9 | Aug 25 | kalcaddle kodbox Download from Link serverDownload server-side request forgery |
| CVE-2024-51037 | KO Kodbox Kodcloud | 5.3 | Nov 15 | An issue in kodbox v.1.52.04 and before allows a remote attacker to obtain sensitive information via the captcha feature in the password reset function |
| CVE-2023-52069 | KO Kodbox Kodcloud | 5.4 | Jan 17 | kodbox v1.49.04 was discovered to contain a cross-site scripting (XSS) vulnerability via the URL parameter |
| CVE-2023-52068 | KO Kodbox Kodcloud | 6.1 | Jan 16 | kodbox v1.43 was discovered to contain a cross-site scripting (XSS) vulnerability via the operation and login logs |
| CVE-2023-39691 | KO Kodbox Kodcloud | 9.8 | Jan 16 | An issue discovered in kodbox through 1.43 allows attackers to arbitrarily add Administrator accounts via crafted GET request |
| CVE-2023-49489 | KO Kodexplorer Kodcloud | 6.1 | Dec 19 | Reflective Cross Site Scripting (XSS) vulnerability in KodExplorer version 4.51, allows attackers to obtain sensitive information and escalate privileges via the APP_HOST… |
| CVE-2023-6853 | KO Kodexplorer Kodcloud | 9.8 | Dec 16 | kalcaddle KodExplorer app.php index server-side request forgery |
| CVE-2023-6852 | KO Kodexplorer Kodcloud | 9.8 | Dec 16 | kalcaddle KodExplorer app.php server-side request forgery |
| CVE-2023-6851 | KO Kodexplorer Kodcloud | 9.8 | Dec 16 | kalcaddle KodExplorer ZIP Archive app.php unzipList code injection |
| CVE-2023-6850 | KO Kodexplorer Kodcloud | 9.8 | Dec 16 | kalcaddle KodExplorer API Endpoint unrestricted upload |
| CVE-2023-6849 | KO Kodbox Kodcloud | 9.8 | Dec 16 | kalcaddle kodbox app.php cover server-side request forgery |
| CVE-2023-6848 | KO Kodbox Kodcloud | 9.8 | Dec 16 | kalcaddle kodbox index.class.php check command injection |
| CVE-2023-48028 | KO Kodbox Kodcloud | 9.8 | Nov 17 | kodbox 1.46.01 has a security flaw that enables user enumeration |
| CVE-2023-45998 | KO Kodbox Kodcloud | 5.4 | Oct 23 | kodbox 1.44 is vulnerable to Cross Site Scripting (XSS) |
| CVE-2021-36646 | KO Kodexplorer Kodcloud | 6.1 | Sep 6 | A Cross Site Scrtpting (XSS) vulnerability in KodExplorer 4.45 allows remote attackers to run arbitrary code via /index.php page |
| CVE-2023-3607 | KO Kodbox Kodcloud | 8.0 | Jul 10 | kodbox WebConsole Plug-In webconsole.php.txt Execute os command injection |
| CVE-2023-37153 | KO Kodexplorer Kodcloud | 6.1 | Jul 10 | KodExplorer 4.51 contains a Cross-Site Scripting (XSS) vulnerability in the Description box of the Light App creation feature |
| CVE-2023-29790 | KO Kodbox Kodcloud | 7.5 | May 12 | kodbox 1.2.x through 1.3.7 has a Sensitive Information Leakage issue |
| CVE-2023-29791 | KO Kodbox Kodcloud | 6.1 | May 11 | kodbox <= 1.37 is vulnerable to Cross Site Scripting (XSS) via the debug information |
| CVE-2022-4944 | KO Kodexplorer Kodcloud | 8.8 | Apr 22 | kalcaddle KodExplorer cross-site request forgery |
| CVE-2022-46154 | KO Kodexplorer Kodcloud | 7.5 | Dec 6 | Arbitrary file access in KodExplorer |