273 matches found
CVE-2023-6848
The CVE-2023-6848 issue affects kalcaddle kodbox up to 1.48. The vulnerable component is plugins/officeViewer/controller/libreOffice/index.class.php (check function). Manipulating the soffice argument leads to remote command injection. Exploitation has been disclosed publicly. A fix is available ...
CVE-2023-6848
A vulnerability was found in kalcaddle kodbox up to 1.48. It has been declared as critical. Affected by this vulnerability is the function check of the file plugins/officeViewer/controller/libreOffice/index.class.php. The manipulation of the argument soffice leads to command injection. The attack...
CVE-2023-6848 kalcaddle kodbox index.class.php check command injection
A vulnerability was found in kalcaddle kodbox up to 1.48. It has been declared as critical. Affected by this vulnerability is the function check of the file plugins/officeViewer/controller/libreOffice/index.class.php. The manipulation of the argument soffice leads to command injection. The attack...
PT-2023-32790 · Kodbox · Kodbox
Name of the Vulnerable Software and Affected Versions: kalcaddle kodbox versions up to 1.48 Description: A critical issue affects the function cover of the file plugins/fileThumb/app.php. The manipulation of the argument path leads to server-side request forgery. This issue can be exploited...
CVE-2023-6849: Server-Side Request Forgery (SSRF)
A vulnerability was found in kalcaddle kodbox up to 1.48. It has been rated as critical. Affected by this issue is the function cover of the file plugins/fileThumb/app.php. The manipulation of the argument path leads to server-side request forgery. The attack may be launched remotely. The exploit...
CVE-2023-6848: Improper Neutralization of Special Elements used in a Command
A vulnerability was found in kalcaddle kodbox up to 1.48. It has been declared as critical. Affected by this vulnerability is the function check of the file plugins/officeViewer/controller/libreOffice/index.class.php. The manipulation of the argument soffice leads to command injection. The attack...
PT-2023-32789 · Kodbox · Kodbox
Name of the Vulnerable Software and Affected Versions: kalcaddle kodbox versions up to 1.48 Description: A critical issue has been found, affecting the function check of the file plugins/officeViewer/controller/libreOffice/index.class.php. The manipulation of the soffice argument leads to command...
kodbox command injection vulnerability
kodbox is a network file manager. A command injection vulnerability exists in kodbox version 1.48, which stems from a manipulation of the parameter soffice that results in command injection...
kodbox Code Issues Vulnerabilities
kodbox is a network file manager. A code issue vulnerability exists in kalcaddle kodbox version 1.48, which stems from the fact that manipulation of parameter paths can lead to server-side request forgery...
CVE-2023-48028
kodbox 1.46.01 has a security flaw that enables user enumeration. This problem is present on the login page, where an attacker can identify valid users based on varying response messages, potentially paving the way for a brute force attack...
CVE-2023-48028
kodbox 1.46.01 has a security flaw that enables user enumeration. This problem is present on the login page, where an attacker can identify valid users based on varying response messages, potentially paving the way for a brute force attack...
Code injection
kodbox 1.46.01 has a security flaw that enables user enumeration. This problem is present on the login page, where an attacker can identify valid users based on varying response messages, potentially paving the way for a brute force attack...
kodbox security breach
kodbox is a network file manager. A security vulnerability exists in kodbox version 1.46.01. An attacker could exploit the vulnerability to identify valid users based on different response messages...
CVE-2023-48028
kodbox 1.46.01 has a security flaw that enables user enumeration. This problem is present on the login page, where an attacker can identify valid users based on varying response messages, potentially paving the way for a brute force attack...
PT-2023-30673 · Kodbox · Kodbox
Name of the Vulnerable Software and Affected Versions: kodbox version 1.46.01 Description: The issue allows user enumeration, which is present on the login page. An attacker can identify valid users based on varying response messages, potentially paving the way for a brute force attack...
CVE-2023-48028
kodbox 1.46.01 has a security flaw that enables user enumeration. This problem is present on the login page, where an attacker can identify valid users based on varying response messages, potentially paving the way for a brute force attack...
CVE-2023-48028: Improper Restriction of Excessive Authentication Attempts
kodbox 1.46.01 has a security flaw that enables user enumeration. This problem is present on the login page, where an attacker can identify valid users based on varying response messages, potentially paving the way for a brute force attack...
CVE-2023-48028
Summary (CVE-2023-48028) kodbox 1.46.01 exposes a login-page user enumeration flaw. Different response messages allow an attacker to determine valid usernames, potentially enabling brute-force attempts. The entry carries a NVD CVSS 3.1 score of 9.8 (CRITICAL) with network attack vector, low compl...
CVE-2023-48028
kodbox 1.46.01 has a security flaw that enables user enumeration. This problem is present on the login page, where an attacker can identify valid users based on varying response messages, potentially paving the way for a brute force attack...
