KO
Product
KodExplorer
16
CVEs
0
On KEV
9.8
Max CVSS
2
New 30D
Severity mix
Critical 4High 4Medium 7Low 1
Watch
Add KodExplorer to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2023-6853 | 9.8 | Dec 16 | kalcaddle KodExplorer app.php index server-side request forgery Affected: before 4.52.01 |
| CVE-2023-6852 | 9.8 | Dec 16 | kalcaddle KodExplorer app.php server-side request forgery Affected: before 4.52.01 |
| CVE-2023-6851 | 9.8 | Dec 16 | kalcaddle KodExplorer ZIP Archive app.php unzipList code injection Affected: before 4.52.01 |
| CVE-2023-6850 | 9.8 | Dec 16 | kalcaddle KodExplorer API Endpoint unrestricted upload Affected: before 4.52.01 |
| CVE-2022-4944 | 8.8 | Apr 22 | kalcaddle KodExplorer cross-site request forgery Affected: through 4.49 |
| CVE-2022-46154 | 7.5 | Dec 6 | Kodexplorer is a chinese language web based file manager and browser based code editor Affected: before 4.50 |
| CVE-2026-6569 | 7.3 | Apr 19 | kodcloud KodExplorer fileGet Endpoint share.class.php improper authentication Affected: 4.0; 4.1; 4.2; 4.3; 4.4; 4.5; +34 more |
| CVE-2026-6568 | 7.3 | Apr 19 | kodcloud KodExplorer Public Share share.class.php initShareOld path traversal Affected: 4.0; 4.1; 4.2; 4.3; 4.4; 4.5; +34 more |
| CVE-2026-116057 New | 6.3 | Oct 25 | KodCloud KodExplorer Online Editor Save Endpoint editor.class.php unrestricted upload Affected: 4.0; 4.1; 4.2; 4.3; 4.4; 4.5; +34 more |
| CVE-2026-116056 New | 6.3 | Oct 25 | KodCloud KodExplorer Remote Download web.function.php request_url_safe server-side request forgery Affected: 4.0; 4.1; 4.2; 4.3; 4.4; 4.5; +34 more |
| CVE-2026-6571 | 6.3 | Apr 19 | kodcloud KodExplorer systemRole.class.php roleGroupAction authorization Affected: 4.0; 4.1; 4.2; 4.3; 4.4; 4.5; +34 more |
| CVE-2025-34504 | 6.1 | Dec 11 | KodExplorer 4.52 Open Redirect Vulnerability via User Login Endpoint Affected: 4.52 |
| CVE-2023-49489 | 6.1 | Dec 19 | Reflective Cross Site Scripting (XSS) vulnerability in KodExplorer version 4.51, allows attackers to obtain sensitive information and escalate privileges via the APP_HOST… Affected: 4.51 |
| CVE-2021-36646 | 6.1 | Sep 6 | A Cross Site Scrtpting (XSS) vulnerability in KodExplorer 4.45 allows remote attackers to run arbitrary code via /index.php page Affected: 4.45 |
| CVE-2023-37153 | 6.1 | Jul 10 | KodExplorer 4.51 contains a Cross-Site Scripting (XSS) vulnerability in the Description box of the Light App creation feature Affected: 4.51 |
| CVE-2026-6570 | 2.7 | Apr 19 | kodcloud KodExplorer systemMember.class.php initInstall authorization Affected: 4.0; 4.1; 4.2; 4.3; 4.4; 4.5; +34 more |
Showing 16