Skip to content
Noroxi

codiad records

14 published records for vendor codiad.

Researcher profile

Entered KEV
0 · 0%
Weaponized
0 · 0%
Pre-auth RCE
4
With a fix record
14.3%
Median publish → KEV
No record has entered KEV

Records by year

  1. 17
  2. 18
  3. 20
  4. 21
  5. 23
  6. 24

Bar: total · dark part: CISA KEV.

Recurring classes

The weakness classes this vendor ships most often: where to look.

CWE

Attack profile

All records

14 records
  • CVE-2018-14009
    50Plan

    Codiad through 2.8.4 allows Remote Code Execution, a different vulnerability than CVE-2017-11366 and CVE-2017-15689.

    CriticalCVSS 9.8Proof of conceptEPSS 38%

    codiad · codiadJul 12, 2018

  • CVE-2019-19208
    45Plan

    Codiad Web IDE through 2.8.4 allows PHP Code injection.

    CriticalCVSS 9.8Proof of conceptEPSS 19%

    codiad · codiadMar 16, 2020

  • CVE-2017-11366
    41Plan

    components/filemanager/class.filemanager.php in Codiad before 2.8.4 is vulnerable to remote command execution because shell commands can be

    CriticalCVSS 9.8Proof of conceptEPSS 8%

    codiad · codiadAug 20, 2017

  • CVE-2020-14043
    35Monitor

    ** PRODUCT NOT SUPPORTED WHEN ASSIGNED ** A Cross Side Request Forgery (CSRF) vulnerability was found in Codiad v1.7.8 and later.

    HighCVSS 8.8No exploitEPSS 2%

    codiad · codiadAug 24, 2020

  • CVE-2018-19423
    33Monitor

    Codiad 2.8.4 allows remote authenticated administrators to execute arbitrary code by uploading an executable file.

    HighCVSS 7.2Proof of conceptEPSS 18%

    codiad · codiadNov 21, 2018

  • CVE-2020-23355
    30Monitor

    ** PRODUCT NOT SUPPORTED WHEN ASSIGNED ** Codiad 2.8.4 /componetns/user/class.user.php:Authenticate() is vulnerable in magic hash authentica

    HighCVSS 7.5No exploitEPSS 1%

    codiad · codiadJan 27, 2021

  • CVE-2017-1000125
    30Monitor

    Codiad(full version) is vulnerable to write anything to configure file in the installation resulting upload a webshell.

    HighCVSS 7.5No exploitEPSS 1%

    codiad · codiadNov 17, 2017

  • CVE-2017-20178
    30Monitor

    Codiad process.php saveJSON information disclosure

    HighCVSS 7.5No exploitEPSS 1%

    codiad · codiadFeb 21, 2023

  • CVE-2020-14044
    29Monitor

    ** PRODUCT NOT SUPPORTED WHEN ASSIGNED ** A Server-Side Request Forgery (SSRF) vulnerability was found in Codiad v1.7.8 and later.

    HighCVSS 7.2No exploitEPSS 3%

    codiad · codiadAug 24, 2020

  • CVE-2020-14042
    24Monitor

    ** PRODUCT NOT SUPPORTED WHEN ASSIGNED ** A Cross Site Scripting (XSS) vulnerability was found in Codiad v1.7.8 and later.

    MediumCVSS 6.1No exploitEPSS 1%

    codiad · codiadAug 25, 2020

  • CVE-2014-9581
    21Monitor

    Directory traversal vulnerability in components/filemanager/download.php in Codiad 2.4.3 allows remote attackers to read arbitrary files via

    MediumCVSS 5.0Proof of conceptEPSS 4%

    codiad · codiadJan 8, 2015

  • CVE-2024-26557
    21Monitor

    Codiad v2.8.4 allows reflected XSS via the components/market/dialog.php type parameter.

    MediumCVSS 5.4No exploitEPSS 0%

    codiad · codiadMar 21, 2024

  • CVE-2013-7257
    18Monitor

    Cross-site scripting (XSS) vulnerability in Codiad 2.0.7 allows remote attackers to inject arbitrary web script or HTML via the Project Name

    MediumCVSS 4.3No exploitEPSS 2%

    codiad · codiadJan 3, 2014

  • CVE-2014-9582
    17Monitor

    Cross-site scripting (XSS) vulnerability in components/filemanager/dialog.php in Codiad 2.4.3 allows remote attackers to inject arbitrary we

    MediumCVSS 4.3Proof of conceptEPSS 1%

    codiad · codiadJan 8, 2015