KO
Product
kodbox
19
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 2High 1Medium 13Low 3
Watch
Add kodbox to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2023-6849 | 9.8 | Dec 16 | kalcaddle kodbox app.php cover server-side request forgery Affected: 1.0; 1.1; 1.2; 1.3; 1.4; 1.5; +34 more |
| CVE-2023-6848 | 9.8 | Dec 16 | kalcaddle kodbox index.class.php check command injection Affected: 1.0; 1.1; 1.2; 1.3; 1.4; 1.5; +34 more |
| CVE-2026-1066 | 8.8 | Jan 17 | kalcaddle kodbox Compression zip command injection Affected: 1.61.0; 1.61.1; 1.61.2; 1.61.3; 1.61.4; 1.61.5; +5 more |
| CVE-2026-8753 | 6.3 | May 17 | kalcaddle Kodbox fileThumb Plugin VideoResize.class.php parseVideoInfo command injection Affected: 1.0; 1.1; 1.2; 1.3; 1.4; 1.5; +34 more |
| CVE-2026-4589 | 6.3 | Mar 23 | kalcaddle kodbox fileGet Endpoint editor.class.php PathDriverUrl server-side request forgery Affected: 1.64 |
| CVE-2026-2560 | 6.3 | Feb 16 | kalcaddle kodbox Media File Preview Plugin VideoResize.class.php run os command injection Affected: 1.64.05 |
| CVE-2026-5618 | 5.6 | Apr 6 | kalcaddle kodbox shareMake/shareCheck server-side request forgery Affected: 1.0; 1.1; 1.2; 1.3; 1.4; 1.5; +34 more |
| CVE-2026-4830 | 5.6 | Mar 26 | kalcaddle kodbox Public Share userShare.class.php add privilege escalation Affected: 1.64 |
| CVE-2026-4592 | 5.6 | Mar 23 | kalcaddle kodbox Password Login index.class.php tfaVerify improper authentication Affected: 1.64 |
| CVE-2026-18720 | 5.3 | Aug 4 | kalcaddle kodbox msgWarning Plugin action improper authorization Affected: 1.67 Build 02 |
| CVE-2024-51037 | 5.3 | Nov 15 | An issue in kodbox v.1.52.04 and before allows a remote attacker to obtain sensitive information via the captcha feature in the password reset function Affected: before 1.52.04 |
| CVE-2025-9414 | 4.9 | Aug 25 | kalcaddle kodbox Download from Link serverDownload server-side request forgery Affected: 1.61 |
| CVE-2026-4591 | 4.7 | Mar 23 | kalcaddle kodbox fileThumb Endpoint app.php checkBin os command injection Affected: 1.64 |
| CVE-2026-18721 | 4.3 | Aug 4 | kalcaddle kodbox SSO API Login apiLogin redirect Affected: 1.67 Build 02 |
| CVE-2025-11016 | 4.3 | Sep 26 | kalcaddle kodbox index.class.php fileOut path traversal Affected: 1.61.09 |
| CVE-2025-10233 | 4.3 | Sep 10 | kalcaddle kodbox editor.class.php fileSave path traversal Affected: 1.61 |
| CVE-2026-4831 | 3.7 | Mar 26 | kalcaddle kodbox Password-protected Share auth.class.php can improper authentication Affected: 1.64 |
| CVE-2026-4588 | 3.7 | Mar 23 | kalcaddle kodbox Site-level API key shareOut.class.php shareSafeGroup hard-coded key Affected: 1.64 |
| CVE-2026-4590 | 3.1 | Mar 23 | kalcaddle kodbox loginSubmit API index.class.php cross-site request forgery Affected: 1.64 |
Showing 19