CVE-2020-14043

PRODUCT NOT SUPPORTED WHEN ASSIGNED A Cross Side Request Forgery CSRF vulnerability was found in Codiad v1.7.8 and later. The request to download a plugin from the marketplace is only available to admin users and it isn't CSRF protected in components/market/controller.php. This might cause admins...

Cross site request forgery (csrf)

PRODUCT NOT SUPPORTED WHEN ASSIGNED A Cross Side Request Forgery CSRF vulnerability was found in Codiad v1.7.8 and later. The request to download a plugin from the marketplace is only available to admin users and it isn't CSRF protected in components/market/controller.php. This might cause admins...

Server side request forgery (ssrf)

PRODUCT NOT SUPPORTED WHEN ASSIGNED A Server-Side Request Forgery SSRF vulnerability was found in Codiad v1.7.8 and later. A user with admin privileges could use the plugin install feature to make the server request any URL via components/market/class.market.php. This could potentially result in...

CVE-2020-14043

The CVE-2020-14043 issue affects Codiad v1.7.8 and later. The root cause is lack of CSRF protection in the marketplace plugin download flow (components/market/controller.php), which could allow an admin-initiated action to be exploited, potentially leading to remote code execution. Documented ref...

CVE-2020-14043

PRODUCT NOT SUPPORTED WHEN ASSIGNED A Cross Side Request Forgery CSRF vulnerability was found in Codiad v1.7.8 and later. The request to download a plugin from the marketplace is only available to admin users and it isn't CSRF protected in components/market/controller.php. This might cause admins...

CVE-2020-14044

PRODUCT NOT SUPPORTED WHEN ASSIGNED A Server-Side Request Forgery SSRF vulnerability was found in Codiad v1.7.8 and later. A user with admin privileges could use the plugin install feature to make the server request any URL via components/market/class.market.php. This could potentially result in...

CVE-2020-14044

Codiad SSRF: CVE-2020-14044 affects v1.7.8 and later. An admin could abuse the plugin install feature to cause the server to fetch arbitrary URLs via components/market/class.market.php, potentially enabling remote code execution. The issue is reported by multiple sources; vendor states Codiad is ...

PT-2020-13861 · Codiad · Codiad

Name of the Vulnerable Software and Affected Versions: Codiad versions 1.7.8 and later Description: A Cross Side Request Forgery CSRF vulnerability was found in the request to download a plugin from the marketplace, which is only available to admin users. The issue lies in the...

PT-2020-13862 · Codiad · Codiad

Name of the Vulnerable Software and Affected Versions: Codiad versions 1.7.8 and later Description: A Server-Side Request Forgery SSRF issue was found in the software. It allows a user with admin privileges to use the plugin install feature to make the server request any URL via...

Codiad Web IDE Code Injection Vulnerability

Codiad Web IDE is Codiad project a set of Web-based IDE Integrated Development Environment. A code injection vulnerability exists in Codiad Web IDE 2.8.4 and earlier versions, which can be exploited by an attacker to inject PHP code...

CVE-2019-19208

Codiad Web IDE through 2.8.4 allows PHP Code injection...

CVE-2019-19208

Codiad Web IDE through 2.8.4 allows PHP Code injection...

Code injection

Codiad Web IDE through 2.8.4 allows PHP Code injection...

CVE-2019-19208

CVE-2019-19208 affects Codiad Web IDE up to version 2.8.4. The vulnerability is a PHP code injection vulnerability that, if exploited, can lead to arbitrary code execution on the server. The root cause is an injection point present before the initial configuration, enabling an attacker to run PHP...

CVE-2019-19208

Codiad Web IDE through 2.8.4 allows PHP Code injection...

Codiad Arbitrary Code Execution Vulnerability

Codiad is a U.S. software developer Kent Safranski developed a set of Web-based IDE framework , it contains a project/file manager and code editor , mainly used for online writing and editing code . A security vulnerability exists in Codiad version 2.8.4. A remote attacker can exploit this...

Design/Logic Flaw

Codiad 2.8.4 allows remote authenticated administrators to execute arbitrary code by uploading an executable file...

CVE-2018-19423

Codiad 2.8.4 allows remote authenticated administrators to execute arbitrary code by uploading an executable file...

CVE-2018-19423

Codiad 2.8.4 allows remote authenticated administrators to execute arbitrary code by uploading an executable file...

CVE-2018-19423

CVE-2018-19423 affects Codiad 2.8.4. Remote authenticated administrators can upload an executable file to execute arbitrary code. The vulnerability is documented across multiple sources (NVD, CNVD, OSV, CVE list) with consistent impact. The provided documents do not include remediation details. P...