231 matches found
CVE-2023-52069
kodbox v1.49.04 was discovered to contain a cross-site scripting XSS vulnerability via the URL parameter...
Cross site scripting
kodbox v1.49.04 was discovered to contain a cross-site scripting XSS vulnerability via the URL parameter...
CVE-2023-52069
CVE-2023-52069 affects kodbox v1.49.04, which is reported to contain a cross-site scripting (XSS) vulnerability via a URL parameter. The CVSS v3.1 base score is 5.4 (Medium), with attack vector NETWORK, attack complexity LOW, privileges required LOW, user interaction REQUIRED, and a Changed scope...
CVE-2023-52069
kodbox v1.49.04 was discovered to contain a cross-site scripting XSS vulnerability via the URL parameter...
CVE-2023-52069
kodbox v1.49.04 was discovered to contain a cross-site scripting XSS vulnerability via the URL parameter...
kodbox security breach
kodbox is a web file manager. A security vulnerability exists in kodbox version v1.49.04, which stems from the presence of a cross-site scripting XSS vulnerability via URL parameters...
CVE-2023-39691
An issue discovered in kodbox through 1.43 allows attackers to arbitrarily add Administrator accounts via crafted GET request...
CVE-2023-39691
An issue discovered in kodbox through 1.43 allows attackers to arbitrarily add Administrator accounts via crafted GET request...
CVE-2023-52068
kodbox v1.43 was discovered to contain a cross-site scripting XSS vulnerability via the operation and login logs...
Cross site scripting
kodbox v1.43 was discovered to contain a cross-site scripting XSS vulnerability via the operation and login logs...
Cross site request forgery (csrf)
An issue discovered in kodbox through 1.43 allows attackers to arbitrarily add Administrator accounts via crafted GET request...
CVE-2023-39691
An issue discovered in kodbox through 1.43 allows attackers to arbitrarily add Administrator accounts via crafted GET request...
PT-2024-14382 · Kodbox · Kodbox
Name of the Vulnerable Software and Affected Versions: kodbox version 1.43 Description: A cross-site scripting XSS issue was found in kodbox via the operation and login logs. This allows for potential malicious script execution. Recommendations: For kodbox version 1.43, update to a version that...
PT-2024-12820 · Kodbox · Kodbox
Name of the Vulnerable Software and Affected Versions: kodbox versions 1.43 and earlier Description: An issue in kodbox allows attackers to arbitrarily add Administrator accounts via crafted GET requests. Recommendations: For versions 1.43 and earlier, update to a version that contains a fix for...
CVE-2023-52068
kodbox v1.43 was discovered to contain a cross-site scripting XSS vulnerability via the operation and login logs...
CVE-2023-52068
Kodbox v1.43 is impacted by a cross-site scripting (XSS) vulnerability exploitable via the operation and login logs. The CVE entry (CVE-2023-52068) associates a CVSS v3.1 base score of 6.1 (MEDIUM) with network attack vector, no privileges required, user interaction required. The root cause is de...
CVE-2023-39691
CVE-2023-39691 affects kodbox up to version 1.43, where an issue allows an attacker to arbitrarily add Administrator accounts through a crafted GET request. Impact is high: unauthorized admin account creation with potential full control over the system. Root cause and exact vulnerable component a...
CVE-2023-52068
kodbox v1.43 was discovered to contain a cross-site scripting XSS vulnerability via the operation and login logs...