CVE-2023-48028

kodbox 1.46.01 has a security flaw that enables user enumeration. This problem is present on the login page, where an attacker can identify valid users based on varying response messages, potentially paving the way for a brute force attack...

CVE-2023-48028

Summary (CVE-2023-48028) kodbox 1.46.01 exposes a login-page user enumeration flaw. Different response messages allow an attacker to determine valid usernames, potentially enabling brute-force attempts. The entry carries a NVD CVSS 3.1 score of 9.8 (CRITICAL) with network attack vector, low compl...

CVE-2023-45998

kodbox 1.44 is vulnerable to Cross Site Scripting XSS. Customizing global HTML results in storing XSS...

CVE-2023-45998

kodbox 1.44 is vulnerable to Cross Site Scripting XSS. Customizing global HTML results in storing XSS...

CVE-2023-45998

kodbox 1.44 is vulnerable to Cross Site Scripting XSS. Customizing global HTML results in storing XSS...

Cross site scripting

kodbox 1.44 is vulnerable to Cross Site Scripting XSS. Customizing global HTML results in storing XSS...

kodbox Cross-Site Scripting Vulnerability

kodbox is a web file manager. A security vulnerability exists in kodbox version 1.44, which stems from a custom global HTML that causes XSS...

CVE-2023-45998

kodbox 1.44 is vulnerable to Cross Site Scripting XSS. Customizing global HTML results in storing XSS...

CVE-2023-45998

CVE-2023-45998 affects kodbox 1.44 and describes a Cross Site Scripting (XSS) vulnerability triggered by customizing global HTML, resulting in stored XSS. Affected component/entry point is the global HTML customization path; underlying issue is XSS propagation via stored payloads. Documented impa...

CVE-2023-45998

kodbox 1.44 is vulnerable to Cross Site Scripting XSS. Customizing global HTML results in storing XSS...

CVE-2023-3607

A vulnerability was found in kodbox 1.26. It has been declared as critical. This vulnerability affects the function Execute of the file webconsole.php.txt of the component WebConsole Plug-In. The manipulation leads to os command injection. The exploit has been disclosed to the public and may be...

Command injection

A vulnerability was found in kodbox 1.26. It has been declared as critical. This vulnerability affects the function Execute of the file webconsole.php.txt of the component WebConsole Plug-In. The manipulation leads to os command injection. The exploit has been disclosed to the public and may be...

CVE-2023-3607

CVE-2023-3607 affects kodbox 1.26, specifically the Execute function in the WebConsole Plug-In (webconsole.php.txt), enabling os command injection. Exploit disclosed publicly; vendor response unavailable. The issue is described consistently across sources, with a high severity in CVSS terms. Prac...

CVE-2023-3607 kodbox WebConsole Plug-In webconsole.php.txt Execute os command injection

A vulnerability was found in kodbox 1.26. It has been declared as critical. This vulnerability affects the function Execute of the file webconsole.php.txt of the component WebConsole Plug-In. The manipulation leads to os command injection. The exploit has been disclosed to the public and may be...

kodbox 操作系统命令注入漏洞

kodbox is a web file manager. An operating system command injection vulnerability exists in kodbox version 1.26, which stems from the file webconsole.php that can lead to operating system command injection...

PT-2023-25419 · Kodbox · Kodbox

Name of the Vulnerable Software and Affected Versions: kodbox version 1.26 Description: A critical issue affects the function Execute of the file webconsole.php.txt in the WebConsole Plug-In component, leading to os command injection. The exploit has been disclosed publicly and may be used. The...

CVE-2023-29790

kodbox 1.2.x through 1.3.7 has a Sensitive Information Leakage issue...

CVE-2023-29790

kodbox 1.2.x through 1.3.7 has a Sensitive Information Leakage issue...

Information disclosure

kodbox 1.2.x through 1.3.7 has a Sensitive Information Leakage issue...

PT-2023-22419 · Kodbox · Kodbox

Name of the Vulnerable Software and Affected Versions: kodbox versions 1.2.x through 1.3.7 Description: The issue is related to Sensitive Information Leakage. Recommendations: For versions 1.2.x through 1.3.7, at the moment, there is no information about a newer version that contains a fix for th...