CVE-2022-46154

CVE-2022-46154 affects KodExplorer (prior to v4.50). The issue lets unauthenticated users request arbitrary files from the host OS file system due to inadequate access control/path traversal. Impact: access to any files available to the host process. The vulnerability is addressed in version 4.50...

KodExplorer 路径遍历漏洞

KodExplorer is a web file manager by the individual developer warlee. A path traversal vulnerability exists in KodExplorer versions prior to 4.50, which stems from the inability to prevent an unauthenticated user from reading arbitrary files from the host OS file system. An attacker could use thi...

PT-2022-27771 · Unknown · Kodexplorer

Name of the Vulnerable Software and Affected Versions: Kodexplorer versions prior to 4.50 Description: Kodexplorer is a Chinese language web-based file manager and browser-based code editor. The issue allows unauthenticated users to request arbitrary files from the host OS file system, making any...

Server-Side Request Forgery (SSRF) in kalcaddle/kodexplorer

✍️ Description The path is vulnerable to ssrf via svg file upload 🕵️‍♂️ Proof of Concept upload an SVG file with SSRF payload in it. open option on the file and open with browser. 💥 Impact redirect host via ssrf...

Server-Side Request Forgery (SSRF) in kalcaddle/kodexplorer

✍️ Description SSRF via SVG due to improper processing of SVG files. 🕵️‍♂️ Proof of Concept Payload: https://drive.google.com/file/d/1q-GHJ01p8Ssok1GWN-QxSznBy1JGvY8x/view?usp=sharing Download and upload it on the server and run the server on port 8000 and then view the file. 💥 Impact This...

in kalcaddle/kodexplorer

💥 BUG direct file url leaked for eml file 💥 IMPACT user can upload eml file and can share this . After sharing this file , it will leak direct link of this file .\ Which allow to download this file even when sharing is disabled . 💥 STEP TO REPRODUCE 1. First goto your kodexplorer admin account an...

in kalcaddle/kodexplorer

💥 BUG any user can download any file 💥 IMPACT download any kodexplorer uploaded file 💥 STEP TO REPRODUCE 1. First goto your kodexplorer admin account and visit desktop .\ Now upload a txt file called a.txt to desktop .\ 2. Now open another browser and visit...

Path Traversal in kalcaddle/kodexplorer

✍️ Description KodExplorer A web-based file manager, web IDE/browser-based code editor. I discovered that by uploading a symbolic linked file via any user, he/she could see any file in the server which causes Path Traversal vulnerability. 🕵️‍♂️ Proof of Concept 1. Create a file by the following...

Path Traversal in kalcaddle/kodexplorer

✍️ Description I have confirmed a file transversal vulnerability on any server running Kodexplorer, Malicious user can read any file 🕵️‍♂️ Proof of Concept First setup local installation of kodExplorer. If the server is running with root permission:...

Cross-site Scripting (XSS) - Stored in kalcaddle/kodexplorer

BUG ======== Stored xss via oexe file upload ACCOUNT ============= 1. user A--admin --victim 2. user B --demo user -- attacker STEP TO REPRODUCE ================== 1. from user B account create oexe file with bellow content...

Arbitrary File Deletion Vulnerability in kodexplorer Kodo Cloud 4.40

kodexplorer Kodo Cloud, formerly known as Mango Cloud, is a private cloud online document management solution based on Web technology. The kodexplorer Kodo Cloud 4.40 has an arbitrary file deletion vulnerability that can be exploited by an attacker with the privilege to install and uninstall...

Code Execution Vulnerability in kodexplorer Kodo Cloud 4.40

kodexplorer Kodo Cloud, formerly known as Mango Cloud, is a private cloud online document management solution based on Web technology. A code execution vulnerability exists in kodexplorer Kodo Cloud 4.40, which can be exploited by an attacker with privileges to upload and manage plugins to gain...

File upload vulnerability in kodexplorer Kodo Cloud

KodExplorer Kodo Cloud, formerly known as Mango Cloud, is a private cloud online document management solution based on Web technology. A file upload vulnerability exists in kodexplorer Kodo Cloud, which can be exploited by attackers to gain server privileges...

Arbitrary file read vulnerability in kodexplorer Kodo Cloud v4.39

KodExplorer Kodo Cloud, formerly known as Mango Cloud, is a private cloud online document management solution based on Web technology. An arbitrary file read vulnerability exists in kodexplorer Kodo Cloud v4.39, which can be exploited by an attacker to cause arbitrary file reads...

KODExplorer v4.06 Arbitrary File Read Vulnerability in Frontend

KodExplorer Kodo Cloud formerly Mango Cloud is a private cloud and online file management system based on Web technology developed by Shanghai Daimu Networks Co., Ltd. and is committed to providing users with secure and controllable, reliable and easy-to-use, highly scalable private cloud...

Arbitrary File Write Vulnerability in KODExplorer v4.06 Frontend

KodExplorer Kodo Cloud formerly Mango Cloud is a private cloud and online file management system based on Web technology developed by Shanghai Daimu Networks Co., Ltd. and is committed to providing users with secure and controllable, reliable and easy-to-use, highly scalable private cloud...

Arbitrary File Read Vulnerability in KodExplorer

KodExplorer Kodo Cloud formerly Mango Cloud is a private cloud and online file management system based on Web technology developed by Shanghai Daimu Networks Co., Ltd. and is committed to providing users with secure and controllable, reliable and easy-to-use, highly scalable private cloud...

KODExplorer Web File Manager Cross Site Scripting

================================================================================ KODExplorer web file manager - Cross Site Scripting ================================================================================ Vendor Homepage: https://github.com/kalcaddle/KODExplorer/ - http://kalcaddle.com/...

Mango cloud KODExlporer design flaws lead to arbitrary code execution-vulnerability warning-the black bar safety net

http://www.wooyun.org/bugs/wooyun-2014-066056 About the content: http://www.kalcaddle.com The test account permissions: default The problem is in the renaming. I upload. php file is not executed, ok, then change suffix to. ph After a successful upload, 改名.php, tips no limit. Well, 改名.php ,rename ...