What’s Vulnerable › Products
kalcaddle kodbox vulnerabilities
27 known vulnerabilities, 0 confirmed exploited in the wild (CISA KEV), 17 published in the last 12 months.
Check whether your kalcaddle kodbox version is affected
Latest kalcaddle kodbox vulnerabilities
- CVE-2026-18721 — kalcaddle kodbox SSO API Login apiLogin redirect (CVSS 4.3)
- CVE-2026-18720 — kalcaddle kodbox msgWarning Plugin action improper authorization (CVSS 5.3)
- CVE-2026-8753 — kalcaddle Kodbox fileThumb Plugin VideoResize.class.php parseVideoInfo command injection (CVSS 6.3)
- CVE-2026-5618 — kalcaddle kodbox shareMake/shareCheck server-side request forgery (CVSS 5.6)
- CVE-2026-4831 — kalcaddle kodbox Password-protected Share auth.class.php can improper authentication (CVSS 3.7)
- CVE-2026-4830 — kalcaddle kodbox Public Share userShare.class.php add privilege escalation (CVSS 5.6)
- CVE-2026-4592 — kalcaddle kodbox Password Login index.class.php tfaVerify improper authentication (CVSS 5.6)
- CVE-2026-4591 — kalcaddle kodbox fileThumb Endpoint app.php checkBin os command injection (CVSS 4.7)
- CVE-2026-4590 — kalcaddle kodbox loginSubmit API index.class.php cross-site request forgery (CVSS 3.1)
- CVE-2026-4589 — kalcaddle kodbox fileGet Endpoint editor.class.php PathDriverUrl server-side request forgery (CVSS 6.3)
- CVE-2026-4588 — kalcaddle kodbox Site-level API key shareOut.class.php shareSafeGroup hard-coded key (CVSS 3.7)
- CVE-2026-2560 — kalcaddle kodbox Media File Preview Plugin VideoResize.class.php run os command injection (CVSS 6.3)
- CVE-2026-1066 — kalcaddle kodbox Compression zip command injection (CVSS 8.8)
- CVE-2025-11016 — kalcaddle kodbox index.class.php fileOut path traversal (CVSS 4.3)
- CVE-2025-10233 — kalcaddle kodbox editor.class.php fileSave path traversal (CVSS 4.3)
- CVE-2025-9414 — kalcaddle kodbox Download from Link serverDownload server-side request forgery (CVSS 4.9)
- CVE-2024-51037 — (CVSS 5.3)
- CVE-2023-52069 — (CVSS 5.4)
- CVE-2023-52068 — (CVSS 6.1)
- CVE-2023-39691 — (CVSS 9.8)
- CVE-2023-6849 — kalcaddle kodbox app.php cover server-side request forgery (CVSS 9.8)
- CVE-2023-6848 — kalcaddle kodbox index.class.php check command injection (CVSS 9.8)
- CVE-2023-48028 — (CVSS 9.8)
- CVE-2023-45998 — (CVSS 5.4)
- CVE-2023-3607 — kodbox WebConsole Plug-In webconsole.php.txt Execute os command injection (CVSS 8.0)