Cross site scripting

A Cross Site Scrtpting XSS vulnerability in KodExplorer 4.45 allows remote attackers to run arbitrary code via /index.php page...

KodExplorer 跨站脚本漏洞

KodExplorer is a web file manager. A cross-site scripting vulnerability exists in KodExplorer version 4.45. The vulnerability stems from the lack of effective filtering and escaping of user-supplied data in /index.php, which can be exploited by an attacker to execute arbitrary web script or HTML ...

PT-2023-12295 · Unknown · Kodexplorer

Name of the Vulnerable Software and Affected Versions: KodExplorer version 4.45 Description: A Cross Site Scripting XSS issue allows remote attackers to run arbitrary code via the "/index.php" page. This enables attackers to execute malicious scripts on the victim's browser, potentially leading t...

CVE-2021-36646: Improper Neutralization of Input During Web Page Generation

A Cross Site Scrtpting XSS vulnerability in KodExplorer 4.45 allows remote attackers to run arbitrary code via /index.php page...

CVE-2021-36646

CVE-2021-36646 – KodExplorer 4.45 : Several connected sources confirm a cross-site scripting (XSS) issue. The nuclei template specifies a reflected XSS in the file view functionality, specifically in app/template/api/view.html where the path parameter is echoed unsafely, enabling attacker-supplie...

CVE-2021-36646

A Cross Site Scrtpting XSS vulnerability in KodExplorer 4.45 allows remote attackers to run arbitrary code via /index.php page...

CVE-2023-37153

KodExplorer 4.51 contains a Cross-Site Scripting XSS vulnerability in the Description box of the Light App creation feature. An attacker can exploit this vulnerability by injecting XSS syntax into the Description field...

CVE-2023-37153

KodExplorer 4.51 contains a Cross-Site Scripting XSS vulnerability in the Description box of the Light App creation feature. An attacker can exploit this vulnerability by injecting XSS syntax into the Description field...

Cross site scripting

KodExplorer 4.51 contains a Cross-Site Scripting XSS vulnerability in the Description box of the Light App creation feature. An attacker can exploit this vulnerability by injecting XSS syntax into the Description field...

KodExplorer 跨站脚本漏洞

KodExplorer is a web file manager by warlee personal developer. A security vulnerability exists in KodExplorer version 4.51, which stems from a cross-site scripting XSS vulnerability contained in the description box of the Create function, which can be exploited by an attacker by injecting XSS...

CVE-2023-37153

KodExplorer 4.51 contains a Cross-Site Scripting XSS vulnerability in the Description box of the Light App creation feature. An attacker can exploit this vulnerability by injecting XSS syntax into the Description field...

CVE-2023-37153

KodExplorer 4.51 contains a Cross-Site Scripting XSS vulnerability in the Description box of the Light App creation feature. An attacker can exploit this vulnerability by injecting XSS syntax into the Description field...

PT-2023-25811 · Unknown · Kodexplorer

Name of the Vulnerable Software and Affected Versions: KodExplorer version 4.51 Description: The issue concerns a Cross-Site Scripting XSS vulnerability located in the Description box of the Light App creation feature. An attacker can exploit this by injecting XSS syntax into the Description fiel...

CVE-2023-37153

CVE-2023-37153 : KodExplorer 4.51 contains a Cross-Site Scripting (XSS) vulnerability in the Description field of the Light App creation feature. An attacker can inject XSS syntax into the Description, causing script execution when the field is rendered. The available connected documents confirm ...

CVE-2023-37153: Improper Neutralization of Input During Web Page Generation

KodExplorer 4.51 contains a Cross-Site Scripting XSS vulnerability in the Description box of the Light App creation feature. An attacker can exploit this vulnerability by injecting XSS syntax into the Description field...

KodExplorer v4.51.03 - Pwned-Admin File-Inclusion - Remote Code Execution (RCE)

Title: KodExplorer v4.51.03 - Pwned-Admin File-Inclusion - Remote Code Execution RCE Author: nu11secur1ty Date: 04.30.2023 Vendor: https://kodcloud.com/ Software: https://github.com/kalcaddle/KodExplorer/releases/tag/4.51.03 Reference: https://portswigger.net/web-security/file-upload Description:...

KodExplorer v4.51.03 - Pwned-Admin File-Inclusion - Remote Code Execution Vulnerability

Title: KodExplorer v4.51.03 - Pwned-Admin File-Inclusion - Remote Code Execution RCE Author: nu11secur1ty Vendor: https://kodcloud.com/ Software: https://github.com/kalcaddle/KodExplorer/releases/tag/4.51.03 Reference: https://portswigger.net/web-security/file-upload Description: By using this...

KodExplorer 4.49 - CSRF to Arbitrary File Upload Exploit

Exploit Title: KodExplorer ?php s...

KodExplorer 4.49 - CSRF to Arbitrary File Upload

Exploit Title: KodExplorer | | | | | | | / | | |\ \ | /| | | //|/ //\ ./||/|| || | | // | | || KODExplorer = v4.49 Remote Code Executon Coded by MrEmpy ''' def httpd: port = 8080 httpddir = os.path.joinos.path.dirnamefile, 'http' os.chdirhttpddir Handler =...

KodExplorer Cross-Site Request Forgery Vulnerability

KodExplorer is a web file manager by warlee personal developer. A cross-site request forgery vulnerability exists in KodExplorer versions prior to 4.49, which stems from the presence of an unknown function that leads to a cross-site request forgery vulnerability. No details of the vulnerability a...