3 matches found
CVE-2023-39691
An issue discovered in kodbox through 1.43 allows attackers to arbitrarily add Administrator accounts via crafted GET request.
CVE-2023-52069
kodbox v1.49.04 was discovered to contain a cross-site scripting (XSS) vulnerability via the URL parameter.
CVE-2023-52068
kodbox v1.43 was discovered to contain a cross-site scripting (XSS) vulnerability via the operation and login logs.