Skip to content
Noroxi

kodcloud records

24 published records for vendor kodcloud.

Researcher profile

Entered KEV
0 · 0%
Weaponized
0 · 0%
Pre-auth RCE
3
With a fix record
33.3%
Median publish → KEV
No record has entered KEV

Records by year

  1. 22
  2. 23
  3. 24
  4. 25
  5. 26

Bar: total · dark part: CISA KEV.

Recurring classes

The weakness classes this vendor ships most often: where to look.

CWE

Attack profile

All records

24 records
  • CVE-2023-6848
    40Plan

    kalcaddle kodbox index.class.php check command injection

    CriticalCVSS 9.8No exploitEPSS 2%

    kodcloud · kodboxDec 16, 2023

  • CVE-2023-48028
    39Monitor

    kodbox 1.46.01 has a security flaw that enables user enumeration.

    CriticalCVSS 9.8No exploitEPSS 1%

    kodcloud · kodboxNov 17, 2023

  • CVE-2023-6851
    39Monitor

    kalcaddle KodExplorer ZIP Archive app.php unzipList code injection

    CriticalCVSS 9.8No exploitEPSS 1%

    kodcloud · kodexplorerDec 16, 2023

  • CVE-2023-6849
    39Monitor

    kalcaddle kodbox app.php cover server-side request forgery

    CriticalCVSS 9.8No exploitEPSS 1%

    kodcloud · kodboxDec 16, 2023

  • CVE-2023-6850
    39Monitor

    kalcaddle KodExplorer API Endpoint unrestricted upload

    CriticalCVSS 9.8No exploitEPSS 1%

    kodcloud · kodexplorerDec 16, 2023

  • CVE-2023-6852
    39Monitor

    kalcaddle KodExplorer app.php server-side request forgery

    CriticalCVSS 9.8No exploitEPSS 1%

    kodcloud · kodexplorerDec 16, 2023

  • CVE-2023-6853
    39Monitor

    kalcaddle KodExplorer app.php index server-side request forgery

    CriticalCVSS 9.8No exploitEPSS 1%

    kodcloud · kodexplorerDec 16, 2023

  • CVE-2023-39691
    39Monitor

    An issue discovered in kodbox through 1.43 allows attackers to arbitrarily add Administrator accounts via crafted GET request.

    CriticalCVSS 9.8No exploitEPSS 1%

    kodcloud · kodboxJan 16, 2024

  • CVE-2022-4944
    36Monitor

    kalcaddle KodExplorer cross-site request forgery

    HighCVSS 8.8Proof of conceptEPSS 3%

    kodcloud · kodexplorerApr 22, 2023

  • CVE-2023-3607
    34Monitor

    kodbox WebConsole Plug-In webconsole.php.txt Execute os command injection

    HighCVSS 8.0No exploitEPSS 6%

    kodcloud · kodboxJul 10, 2023

  • CVE-2022-46154
    30Monitor

    Arbitrary file access in KodExplorer

    HighCVSS 7.5No exploitEPSS 1%

    kodcloud · kodexplorerDec 6, 2022

  • CVE-2023-29790
    30Monitor

    kodbox 1.2.x through 1.3.7 has a Sensitive Information Leakage issue.

    HighCVSS 7.5No exploitEPSS 1%

    kodcloud · kodboxMay 11, 2023

  • CVE-2021-36646
    24Monitor

    A Cross Site Scrtpting (XSS) vulnerability in KodExplorer 4.45 allows remote attackers to run arbitrary code via /index.php page.

    MediumCVSS 6.1Proof of conceptEPSS 1%

    kodcloud · kodexplorerSep 6, 2023

  • CVE-2023-37153
    24Monitor

    KodExplorer 4.51 contains a Cross-Site Scripting (XSS) vulnerability in the Description box of the Light App creation feature.

    MediumCVSS 6.1No exploitEPSS 1%

    kodcloud · kodexplorerJul 10, 2023

  • CVE-2023-49489
    24Monitor

    Reflective Cross Site Scripting (XSS) vulnerability in KodExplorer version 4.51, allows attackers to obtain sensitive information and escala

    MediumCVSS 6.1Proof of conceptEPSS 1%

    kodcloud · kodexplorerDec 19, 2023

  • CVE-2023-29791
    24Monitor

    kodbox <= 1.37 is vulnerable to Cross Site Scripting (XSS) via the debug information.

    MediumCVSS 6.1No exploitEPSS 0%

    kodcloud · kodboxMay 11, 2023

  • CVE-2023-52068
    24Monitor

    kodbox v1.43 was discovered to contain a cross-site scripting (XSS) vulnerability via the operation and login logs.

    MediumCVSS 6.1No exploitEPSS 0%

    kodcloud · kodboxJan 16, 2024

  • CVE-2025-34504
    21Monitor

    KodExplorer 4.52 Open Redirect Vulnerability via User Login Endpoint

    MediumCVSS 5.3No exploitEPSS 0%

    kodcloud · kodexplorerDec 11, 2025

  • CVE-2023-45998
    21Monitor

    kodbox 1.44 is vulnerable to Cross Site Scripting (XSS).

    MediumCVSS 5.4No exploitEPSS 0%

    kodcloud · kodboxOct 23, 2023

  • CVE-2023-52069
    21Monitor

    kodbox v1.49.04 was discovered to contain a cross-site scripting (XSS) vulnerability via the URL parameter.

    MediumCVSS 5.4No exploitEPSS 0%

    kodcloud · kodboxJan 16, 2024

  • CVE-2024-51037
    21Monitor

    An issue in kodbox v.1.52.04 and before allows a remote attacker to obtain sensitive information via the captcha feature in the password res

    MediumCVSS 5.3No exploitEPSS 0%

    kodcloud · kodboxNov 15, 2024

  • CVE-2026-1066
    10Monitor

    kalcaddle kodbox Compression zip command injection

    LowCVSS 2.1No exploitEPSS 6%

    kodcloud · kodboxJan 17, 2026

  • CVE-2025-10233
    8Monitor

    kalcaddle kodbox editor.class.php fileSave path traversal

    LowCVSS 2.1No exploitEPSS 0%

    kodcloud · kodboxSep 10, 2025

  • CVE-2025-9414
    8Monitor

    kalcaddle kodbox Download from Link serverDownload server-side request forgery

    LowCVSS 2.0No exploitEPSS 0%

    kodcloud · kodboxAug 25, 2025