İçeriğe atla
Noroxi

kodcloud kayıtları

kodcloud üreticisine ait 24 yayımlanmış kayıt.

Araştırmacı profili

KEV’e giren
0 · %0
Silahlaştırılmış
0 · %0
Pre-auth RCE
3
Düzeltme kaydı olan
%33,3
Yayından KEV’e ortanca
KEV’e giren kayıt yok

Yıllara göre kayıt

  1. 22
  2. 23
  3. 24
  4. 25
  5. 26

Çubuk: toplam · koyu kısım: CISA KEV.

Tekrar eden sınıflar

Bu üreticide en sık görülen zafiyet sınıfları: nereye bakmalı.

CWE

Saldırı profili

Tüm kayıtlar

24 kayıt
  • CVE-2023-6848
    40Planlayın

    kalcaddle kodbox index.class.php check command injection

    KritikCVSS 9,8İstismar yokEPSS %2

    kodcloud · kodbox16 Ara 2023

  • CVE-2023-48028
    39İzleyin

    kodbox 1.46.01 has a security flaw that enables user enumeration.

    KritikCVSS 9,8İstismar yokEPSS %1

    kodcloud · kodbox17 Kas 2023

  • CVE-2023-6851
    39İzleyin

    kalcaddle KodExplorer ZIP Archive app.php unzipList code injection

    KritikCVSS 9,8İstismar yokEPSS %1

    kodcloud · kodexplorer16 Ara 2023

  • CVE-2023-6849
    39İzleyin

    kalcaddle kodbox app.php cover server-side request forgery

    KritikCVSS 9,8İstismar yokEPSS %1

    kodcloud · kodbox16 Ara 2023

  • CVE-2023-6850
    39İzleyin

    kalcaddle KodExplorer API Endpoint unrestricted upload

    KritikCVSS 9,8İstismar yokEPSS %1

    kodcloud · kodexplorer16 Ara 2023

  • CVE-2023-6852
    39İzleyin

    kalcaddle KodExplorer app.php server-side request forgery

    KritikCVSS 9,8İstismar yokEPSS %1

    kodcloud · kodexplorer16 Ara 2023

  • CVE-2023-6853
    39İzleyin

    kalcaddle KodExplorer app.php index server-side request forgery

    KritikCVSS 9,8İstismar yokEPSS %1

    kodcloud · kodexplorer16 Ara 2023

  • CVE-2023-39691
    39İzleyin

    An issue discovered in kodbox through 1.43 allows attackers to arbitrarily add Administrator accounts via crafted GET request.

    KritikCVSS 9,8İstismar yokEPSS %1

    kodcloud · kodbox16 Oca 2024

  • CVE-2022-4944
    36İzleyin

    kalcaddle KodExplorer cross-site request forgery

    YüksekCVSS 8,8Kavram kanıtıEPSS %3

    kodcloud · kodexplorer22 Nis 2023

  • CVE-2023-3607
    34İzleyin

    kodbox WebConsole Plug-In webconsole.php.txt Execute os command injection

    YüksekCVSS 8,0İstismar yokEPSS %6

    kodcloud · kodbox10 Tem 2023

  • CVE-2022-46154
    30İzleyin

    Arbitrary file access in KodExplorer

    YüksekCVSS 7,5İstismar yokEPSS %1

    kodcloud · kodexplorer6 Ara 2022

  • CVE-2023-29790
    30İzleyin

    kodbox 1.2.x through 1.3.7 has a Sensitive Information Leakage issue.

    YüksekCVSS 7,5İstismar yokEPSS %1

    kodcloud · kodbox11 May 2023

  • CVE-2021-36646
    24İzleyin

    A Cross Site Scrtpting (XSS) vulnerability in KodExplorer 4.45 allows remote attackers to run arbitrary code via /index.php page.

    OrtaCVSS 6,1Kavram kanıtıEPSS %1

    kodcloud · kodexplorer6 Eyl 2023

  • CVE-2023-37153
    24İzleyin

    KodExplorer 4.51 contains a Cross-Site Scripting (XSS) vulnerability in the Description box of the Light App creation feature.

    OrtaCVSS 6,1İstismar yokEPSS %1

    kodcloud · kodexplorer10 Tem 2023

  • CVE-2023-49489
    24İzleyin

    Reflective Cross Site Scripting (XSS) vulnerability in KodExplorer version 4.51, allows attackers to obtain sensitive information and escala

    OrtaCVSS 6,1Kavram kanıtıEPSS %1

    kodcloud · kodexplorer19 Ara 2023

  • CVE-2023-29791
    24İzleyin

    kodbox <= 1.37 is vulnerable to Cross Site Scripting (XSS) via the debug information.

    OrtaCVSS 6,1İstismar yokEPSS %0

    kodcloud · kodbox11 May 2023

  • CVE-2023-52068
    24İzleyin

    kodbox v1.43 was discovered to contain a cross-site scripting (XSS) vulnerability via the operation and login logs.

    OrtaCVSS 6,1İstismar yokEPSS %0

    kodcloud · kodbox16 Oca 2024

  • CVE-2025-34504
    21İzleyin

    KodExplorer 4.52 Open Redirect Vulnerability via User Login Endpoint

    OrtaCVSS 5,3İstismar yokEPSS %0

    kodcloud · kodexplorer11 Ara 2025

  • CVE-2023-45998
    21İzleyin

    kodbox 1.44 is vulnerable to Cross Site Scripting (XSS).

    OrtaCVSS 5,4İstismar yokEPSS %0

    kodcloud · kodbox23 Eki 2023

  • CVE-2023-52069
    21İzleyin

    kodbox v1.49.04 was discovered to contain a cross-site scripting (XSS) vulnerability via the URL parameter.

    OrtaCVSS 5,4İstismar yokEPSS %0

    kodcloud · kodbox16 Oca 2024

  • CVE-2024-51037
    21İzleyin

    An issue in kodbox v.1.52.04 and before allows a remote attacker to obtain sensitive information via the captcha feature in the password res

    OrtaCVSS 5,3İstismar yokEPSS %0

    kodcloud · kodbox15 Kas 2024

  • CVE-2026-1066
    10İzleyin

    kalcaddle kodbox Compression zip command injection

    DüşükCVSS 2,1İstismar yokEPSS %6

    kodcloud · kodbox17 Oca 2026

  • CVE-2025-10233
    8İzleyin

    kalcaddle kodbox editor.class.php fileSave path traversal

    DüşükCVSS 2,1İstismar yokEPSS %0

    kodcloud · kodbox10 Eyl 2025

  • CVE-2025-9414
    8İzleyin

    kalcaddle kodbox Download from Link serverDownload server-side request forgery

    DüşükCVSS 2,0İstismar yokEPSS %0

    kodcloud · kodbox25 Ağu 2025