270 matches found
kodbox Cross-Site Scripting Vulnerability
kodbox is a web file manager. A security vulnerability exists in kodbox version 1.44, which stems from a custom global HTML that causes XSS...
CVE-2023-45998
kodbox 1.44 is vulnerable to Cross Site Scripting XSS. Customizing global HTML results in storing XSS...
CVE-2023-45998
CVE-2023-45998 affects kodbox 1.44 and describes a Cross Site Scripting (XSS) vulnerability triggered by customizing global HTML, resulting in stored XSS. Affected component/entry point is the global HTML customization path; underlying issue is XSS propagation via stored payloads. Documented impa...
PT-2023-29785
Name of the Vulnerable Software and Affected Versions kodbox version 1.44 Description The issue is related to Cross Site Scripting XSS, where customizing global HTML results in storing XSS. This means that an attacker could potentially inject malicious scripts into the application, which would th...
CVE-2023-45998
kodbox 1.44 is vulnerable to Cross Site Scripting XSS. Customizing global HTML results in storing XSS...
CVE-2023-45998: Improper Neutralization of Input During Web Page Generation
kodbox 1.44 is vulnerable to Cross Site Scripting XSS. Customizing global HTML results in storing XSS...
CVE-2023-3607
A vulnerability was found in kodbox 1.26. It has been declared as critical. This vulnerability affects the function Execute of the file webconsole.php.txt of the component WebConsole Plug-In. The manipulation leads to os command injection. The exploit has been disclosed to the public and may be...
Command injection
A vulnerability was found in kodbox 1.26. It has been declared as critical. This vulnerability affects the function Execute of the file webconsole.php.txt of the component WebConsole Plug-In. The manipulation leads to os command injection. The exploit has been disclosed to the public and may be...
CVE-2023-3607
CVE-2023-3607 affects kodbox 1.26, specifically the Execute function in the WebConsole Plug-In (webconsole.php.txt), enabling os command injection. Exploit disclosed publicly; vendor response unavailable. The issue is described consistently across sources, with a high severity in CVSS terms. Prac...
CVE-2023-3607 kodbox WebConsole Plug-In webconsole.php.txt Execute os command injection
A vulnerability was found in kodbox 1.26. It has been declared as critical. This vulnerability affects the function Execute of the file webconsole.php.txt of the component WebConsole Plug-In. The manipulation leads to os command injection. The exploit has been disclosed to the public and may be...
kodbox 操作系统命令注入漏洞
kodbox is a web file manager. An operating system command injection vulnerability exists in kodbox version 1.26, which stems from the file webconsole.php that can lead to operating system command injection...
PT-2023-25419 · Kodbox · Kodbox
Name of the Vulnerable Software and Affected Versions: kodbox version 1.26 Description: A critical issue affects the function Execute of the file webconsole.php.txt in the WebConsole Plug-In component, leading to os command injection. The exploit has been disclosed publicly and may be used. The...
CVE-2023-3607: Improper Neutralization of Special Elements used in an OS Command
A vulnerability was found in kodbox 1.26. It has been declared as critical. This vulnerability affects the function Execute of the file webconsole.php.txt of the component WebConsole Plug-In. The manipulation leads to os command injection. The exploit has been disclosed to the public and may be...
CVE-2023-29790
kodbox 1.2.x through 1.3.7 has a Sensitive Information Leakage issue...
CVE-2023-29790
kodbox 1.2.x through 1.3.7 has a Sensitive Information Leakage issue...
Information disclosure
kodbox 1.2.x through 1.3.7 has a Sensitive Information Leakage issue...
CVE-2023-29790
CVE-2023-29790 affects kodbox versions 1.2.x through 1.3.7, with a reported Sensitive Information Leakage issue. The connected Red Hat, NVD, and third-party records corroborate the affected product range and issue type but do not provide concrete exploit details, affected module/file paths, root ...
CVE-2023-29790
kodbox 1.2.x through 1.3.7 has a Sensitive Information Leakage issue...
PT-2023-22419 · Kodbox · Kodbox
Name of the Vulnerable Software and Affected Versions: kodbox versions 1.2.x through 1.3.7 Description: The issue is related to Sensitive Information Leakage. Recommendations: For versions 1.2.x through 1.3.7, at the moment, there is no information about a newer version that contains a fix for th...