CVE-2023-39691

CVE-2023-39691 affects kodbox up to version 1.43, where an issue allows an attacker to arbitrarily add Administrator accounts through a crafted GET request. Impact is high: unauthorized admin account creation with potential full control over the system. Root cause and exact vulnerable component a...

CVE-2023-52068

Kodbox v1.43 is impacted by a cross-site scripting (XSS) vulnerability exploitable via the operation and login logs. The CVE entry (CVE-2023-52068) associates a CVSS v3.1 base score of 6.1 (MEDIUM) with network attack vector, no privileges required, user interaction required. The root cause is de...

CVE-2023-39691

An issue discovered in kodbox through 1.43 allows attackers to arbitrarily add Administrator accounts via crafted GET request...

CVE-2023-52068

kodbox v1.43 was discovered to contain a cross-site scripting XSS vulnerability via the operation and login logs...

PT-2024-14382 · Kodbox · Kodbox

Name of the Vulnerable Software and Affected Versions: kodbox version 1.43 Description: A cross-site scripting XSS issue was found in kodbox via the operation and login logs. This allows for potential malicious script execution. Recommendations: For kodbox version 1.43, update to a version that...

PT-2024-12820 · Kodbox · Kodbox

Name of the Vulnerable Software and Affected Versions: kodbox versions 1.43 and earlier Description: An issue in kodbox allows attackers to arbitrarily add Administrator accounts via crafted GET requests. Recommendations: For versions 1.43 and earlier, update to a version that contains a fix for...

CVE-2023-39691: Undefined Security Weakness

An issue discovered in kodbox through 1.43 allows attackers to arbitrarily add Administrator accounts via crafted GET request...

CVE-2023-52068: Improper Neutralization of Input During Web Page Generation

kodbox v1.43 was discovered to contain a cross-site scripting XSS vulnerability via the operation and login logs...

PT-2024-14383

Name of the Vulnerable Software and Affected Versions kodbox version 1.49.04 Description A cross-site scripting XSS issue was discovered in kodbox via the URL parameter. This allows for potential malicious script injection and execution. Recommendations For kodbox version 1.49.04, as a temporary...

CVE-2023-6849

A vulnerability was found in kalcaddle kodbox up to 1.48. It has been rated as critical. Affected by this issue is the function cover of the file plugins/fileThumb/app.php. The manipulation of the argument path leads to server-side request forgery. The attack may be launched remotely. The exploit...

CVE-2023-6849 kalcaddle kodbox app.php cover server-side request forgery

A vulnerability was found in kalcaddle kodbox up to 1.48. It has been rated as critical. Affected by this issue is the function cover of the file plugins/fileThumb/app.php. The manipulation of the argument path leads to server-side request forgery. The attack may be launched remotely. The exploit...

CVE-2023-6849 kalcaddle kodbox app.php cover server-side request forgery

A vulnerability was found in kalcaddle kodbox up to 1.48. It has been rated as critical. Affected by this issue is the function cover of the file plugins/fileThumb/app.php. The manipulation of the argument path leads to server-side request forgery. The attack may be launched remotely. The exploit...

CVE-2023-6849 kalcaddle kodbox app.php cover server-side request forgery

A vulnerability was found in kalcaddle kodbox up to 1.48. It has been rated as critical. Affected by this issue is the function cover of the file plugins/fileThumb/app.php. The manipulation of the argument path leads to server-side request forgery. The attack may be launched remotely. The exploit...

CVE-2023-6849

A vulnerability was found in kalcaddle kodbox up to 1.48. It has been rated as critical. Affected by this issue is the function cover of the file plugins/fileThumb/app.php. The manipulation of the argument path leads to server-side request forgery. The attack may be launched remotely. The exploit...

CVE-2023-6849

CVE-2023-6849 affects kalcaddle kodbox up to 1.48, with the vulnerable code in the function cover of plugins/fileThumb/app.php. The issue stems from manipulating the path argument which enables server-side request forgery (SSRF) and can be exploited remotely; exploitation status is not specified ...

CVE-2023-6848

A vulnerability was found in kalcaddle kodbox up to 1.48. It has been declared as critical. Affected by this vulnerability is the function check of the file plugins/officeViewer/controller/libreOffice/index.class.php. The manipulation of the argument soffice leads to command injection. The attack...

Command injection

A vulnerability was found in kalcaddle kodbox up to 1.48. It has been declared as critical. Affected by this vulnerability is the function check of the file plugins/officeViewer/controller/libreOffice/index.class.php. The manipulation of the argument soffice leads to command injection. The attack...

CVE-2023-6848

The CVE-2023-6848 issue affects kalcaddle kodbox up to 1.48. The vulnerable component is plugins/officeViewer/controller/libreOffice/index.class.php (check function). Manipulating the soffice argument leads to remote command injection. Exploitation has been disclosed publicly. A fix is available ...

CVE-2023-6848 kalcaddle kodbox index.class.php check command injection

A vulnerability was found in kalcaddle kodbox up to 1.48. It has been declared as critical. Affected by this vulnerability is the function check of the file plugins/officeViewer/controller/libreOffice/index.class.php. The manipulation of the argument soffice leads to command injection. The attack...

CVE-2023-6848

A vulnerability was found in kalcaddle kodbox up to 1.48. It has been declared as critical. Affected by this vulnerability is the function check of the file plugins/officeViewer/controller/libreOffice/index.class.php. The manipulation of the argument soffice leads to command injection. The attack...