Codiad

14 CVEs across 1 Codiad products. Browse Codiad vulnerabilities, severities, and proof-of-concept exploits.

Codiad products with known CVEs

ProductCVEs
Codiad14
Codiad CVEs — newest first
CVESeverityScorePublishedSummary
CVE-2024-26557Medium5.42024-03-22Codiad v2.8.4 allows reflected XSS via the components/market/dialog.php type parameter.
CVE-2017-20178Low3.12023-02-21** UNSUPPORTED WHEN ASSIGNED ** A vulnerability was found in Codiad 2.8.0. It has been rated as problematic. Affected by this issue is the function saveJSON of…
CVE-2020-23355High7.52021-01-27** PRODUCT NOT SUPPORTED WHEN ASSIGNED ** Codiad 2.8.4 /componetns/user/class.user.php:Authenticate() is vulnerable in magic hash authentication bypass. If enc…
CVE-2020-14042Medium6.12020-08-25** PRODUCT NOT SUPPORTED WHEN ASSIGNED ** A Cross Site Scripting (XSS) vulnerability was found in Codiad v1.7.8 and later. The vulnerability occurs because of…
CVE-2020-14044High7.22020-08-24** PRODUCT NOT SUPPORTED WHEN ASSIGNED ** A Server-Side Request Forgery (SSRF) vulnerability was found in Codiad v1.7.8 and later. A user with admin privileges…
CVE-2020-14043High8.82020-08-24** PRODUCT NOT SUPPORTED WHEN ASSIGNED ** A Cross Side Request Forgery (CSRF) vulnerability was found in Codiad v1.7.8 and later. The request to download a plu…
CVE-2019-19208Critical9.82020-03-16Codiad Web IDE through 2.8.4 allows PHP Code injection.
CVE-2018-19423High7.22018-11-21Codiad 2.8.4 allows remote authenticated administrators to execute arbitrary code by uploading an executable file.
CVE-2018-14009Critical9.82018-07-12Codiad through 2.8.4 allows Remote Code Execution, a different vulnerability than CVE-2017-11366 and CVE-2017-15689.
CVE-2017-1000125High7.52017-11-17Codiad(full version) is vulnerable to write anything to configure file in the installation resulting upload a webshell.
CVE-2017-11366Critical9.82017-08-21components/filemanager/class.filemanager.php in Codiad before 2.8.4 is vulnerable to remote command execution because shell commands can be embedded in paramet…
CVE-2014-95822015-01-08Cross-site scripting (XSS) vulnerability in components/filemanager/dialog.php in Codiad 2.4.3 allows remote attackers to inject arbitrary web script or HTML vi…
CVE-2014-95812015-01-08Directory traversal vulnerability in components/filemanager/download.php in Codiad 2.4.3 allows remote attackers to read arbitrary files via a .. (dot dot) in…
CVE-2013-72572014-01-03Cross-site scripting (XSS) vulnerability in Codiad 2.0.7 allows remote attackers to inject arbitrary web script or HTML via the Project Name field.