CVE-2026-6571 | Medium | 6.3 | 2026-04-19 | A weakness has been identified in kodcloud KodExplorer up to 4.52. Affected by this vulnerability is the function roleGroupAction of the file /app/controller/s… |
CVE-2026-6570 | Low | 2.7 | 2026-04-19 | A security flaw has been discovered in kodcloud KodExplorer up to 4.52. Affected is the function initInstall of the file /app/controller/systemMember.class.php… |
CVE-2026-6569 | High | 7.3 | 2026-04-19 | A vulnerability was identified in kodcloud KodExplorer up to 4.52. This impacts the function fileGet of the file /app/controller/share.class.php of the compone… |
CVE-2026-6568 | High | 7.3 | 2026-04-19 | A vulnerability was determined in kodcloud KodExplorer up to 4.52. This affects the function share.class.php::initShareOld of the file /app/controller/share.cl… |
CVE-2026-1066 | Medium | 6.3 | 2026-01-17 | A vulnerability was detected in kalcaddle kodbox up to 1.61.10. This issue affects some unknown processing of the file /?explorer/index/zip of the component Co… |
CVE-2025-34504 | Medium | 6.1 | 2025-12-11 | KodExplorer 4.52 contains an open redirect vulnerability in the user login page that allows attackers to manipulate the 'link' parameter. Attackers can craft m… |
CVE-2025-10233 | Medium | 6.3 | 2025-09-10 | A security vulnerability has been detected in kalcaddle kodbox 1.61. This affects the function fileGet/fileSave of the file app/controller/explorer/editor.clas… |
CVE-2025-9414 | Medium | 4.7 | 2025-08-25 | A vulnerability was found in kalcaddle kodbox 1.61. Affected by this vulnerability is an unknown functionality of the file /?explorer/upload/serverDownload of… |
CVE-2024-51037 | Medium | 5.3 | 2024-11-15 | An issue in kodbox v.1.52.04 and before allows a remote attacker to obtain sensitive information via the captcha feature in the password reset function. |
CVE-2023-52069 | Medium | 5.4 | 2024-01-17 | kodbox v1.49.04 was discovered to contain a cross-site scripting (XSS) vulnerability via the URL parameter. |
CVE-2023-52068 | Medium | 6.1 | 2024-01-16 | kodbox v1.43 was discovered to contain a cross-site scripting (XSS) vulnerability via the operation and login logs. |
CVE-2023-39691 | Critical | 9.8 | 2024-01-16 | An issue discovered in kodbox through 1.43 allows attackers to arbitrarily add Administrator accounts via crafted GET request. |
CVE-2023-49489 | Medium | 6.1 | 2023-12-19 | Reflective Cross Site Scripting (XSS) vulnerability in KodExplorer version 4.51, allows attackers to obtain sensitive information and escalate privileges via t… |
CVE-2023-6853 | Medium | 6.3 | 2023-12-16 | A vulnerability classified as critical was found in kalcaddle KodExplorer up to 4.51.03. Affected by this vulnerability is the function index of the file plugi… |
CVE-2023-6852 | Medium | 6.3 | 2023-12-16 | A vulnerability classified as critical has been found in kalcaddle KodExplorer up to 4.51.03. Affected is an unknown function of the file plugins/webodf/app.ph… |
CVE-2023-6851 | Medium | 6.3 | 2023-12-16 | A vulnerability was found in kalcaddle KodExplorer up to 4.51.03. It has been rated as critical. This issue affects the function unzipList of the file plugins/… |
CVE-2023-6850 | Medium | 6.3 | 2023-12-16 | A vulnerability was found in kalcaddle KodExplorer up to 4.51.03. It has been declared as critical. This vulnerability affects unknown code of the file /index… |
CVE-2023-6849 | High | 7.3 | 2023-12-16 | A vulnerability was found in kalcaddle kodbox up to 1.48. It has been rated as critical. Affected by this issue is the function cover of the file plugins/fileT… |
CVE-2023-6848 | High | 7.3 | 2023-12-16 | A vulnerability was found in kalcaddle kodbox up to 1.48. It has been declared as critical. Affected by this vulnerability is the function check of the file pl… |
CVE-2023-48028 | Critical | 9.8 | 2023-11-18 | kodbox 1.46.01 has a security flaw that enables user enumeration. This problem is present on the login page, where an attacker can identify valid users based o… |
CVE-2023-45998 | Medium | 5.4 | 2023-10-23 | kodbox 1.44 is vulnerable to Cross Site Scripting (XSS). Customizing global HTML results in storing XSS. |
CVE-2021-36646 | Medium | 6.1 | 2023-09-06 | A Cross Site Scrtpting (XSS) vulnerability in KodExplorer 4.45 allows remote attackers to run arbitrary code via /index.php page. |
CVE-2023-3607 | Medium | 5.5 | 2023-07-10 | A vulnerability was found in kodbox 1.26. It has been declared as critical. This vulnerability affects the function Execute of the file webconsole.php.txt of t… |
CVE-2023-37153 | Medium | 6.1 | 2023-07-10 | KodExplorer 4.51 contains a Cross-Site Scripting (XSS) vulnerability in the Description box of the Light App creation feature. An attacker can exploit this vul… |
CVE-2023-29790 | High | 7.5 | 2023-05-12 | kodbox 1.2.x through 1.3.7 has a Sensitive Information Leakage issue. |
CVE-2023-29791 | Medium | 6.1 | 2023-05-11 | kodbox <= 1.37 is vulnerable to Cross Site Scripting (XSS) via the debug information. |
CVE-2022-4944 | Medium | 4.3 | 2023-04-22 | A vulnerability, which was classified as problematic, has been found in kalcaddle KodExplorer up to 4.49. Affected by this issue is some unknown functionality… |
CVE-2022-46154 | High | 8.6 | 2022-12-06 | Kodexplorer is a chinese language web based file manager and browser based code editor. Versions prior to 4.50 did not prevent unauthenticated users from reque… |