7 matches found
CVE-2026-116057
A vulnerability has been found in KodCloud KodExplorer up to 4.55. Affected by this vulnerability is an unknown functionality of the file app/controller/editor.class.php of the component Online Editor Save Endpoint. Such manipulation of the argument path/filestr leads to unrestricted upload. It i...
CVE-2026-116057 KodCloud KodExplorer Online Editor Save Endpoint editor.class.php unrestricted upload
A vulnerability has been found in KodCloud KodExplorer up to 4.55. Affected by this vulnerability is an unknown functionality of the file app/controller/editor.class.php of the component Online Editor Save Endpoint. Such manipulation of the argument path/filestr leads to unrestricted upload. It i...
CVE-2026-116057
KodCloud KodExplorer (versions up to 4.55 ) is vulnerable to an unrestricted upload flaw in the Online Editor Save Endpoint component. The vulnerability exists within the app/controller/editor.class.php file, where the manipulation of the path/filestr argument allows for remote file uploads. The ...
EUVD-2026-109551
A vulnerability has been found in KodCloud KodExplorer up to 4.55. Affected by this vulnerability is an unknown functionality of the file app/controller/editor.class.php of the component Online Editor Save Endpoint. Such manipulation of the argument path/filestr leads to unrestricted upload. It i...
CVE-2025-10233
A security vulnerability has been detected in kalcaddle kodbox 1.61. This affects the function fileGet/fileSave of the file app/controller/explorer/editor.class.php. The manipulation of the argument path leads to path traversal. The attack can be initiated remotely. The exploit has been disclosed...
CVE-2025-10233: Improper Limitation of a Pathname to a Restricted Directory
A security vulnerability has been detected in kalcaddle kodbox 1.61. This affects the function fileGet/fileSave of the file app/controller/explorer/editor.class.php. The manipulation of the argument path leads to path traversal. The attack can be initiated remotely. The exploit has been disclosed...
PT-2012-2946
Name of the Vulnerable Software and Affected Versions Panels module versions 6.x-2.x through 6.x-3.9 Panels module versions 7.x-3.x through 7.x-2.x Description A cross-site scripting XSS issue exists in the Panels module, specifically in the display renderers/panels renderer editor.class.php file...