Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1359 CNY

100%

kodbox — Vulnerabilities & Security Advisories 19

All 19 CVE vulnerabilities found in kodbox, with AI-generated Chinese analysis, references, and POCs.

This page aggregates vulnerability records for the kodbox product, organized by weakness type and security tags. It collects disclosed security flaws affecting this specific software component, covering the full historical timeline of reported incidents. Readers can track the vendor's published advisories, analyze the distribution of common weakness classes, and examine the complete vulnerability history of kodbox.

Vendor: n/a

CVE ID Title CVSS Severity Published
CVE-2026-18721 kalcaddle kodbox SSO API Login apiLogin redirect CWE-601 4.3 Medium 2026-08-04
CVE-2026-18720 kalcaddle kodbox msgWarning Plugin action improper authorization CWE-285 5.3 Medium 2026-08-04
CVE-2026-8753 kalcaddle Kodbox fileThumb Plugin VideoResize.class.php parseVideoInfo command injection CWE-77 6.3 Medium 2026-05-17
CVE-2026-5618 kalcaddle kodbox shareMake/shareCheck server-side request forgery CWE-918 5.6 Medium 2026-04-06
CVE-2026-4831 kalcaddle kodbox Password-protected Share auth.class.php can improper authentication CWE-287 3.7 Low 2026-03-26
CVE-2026-4830 kalcaddle kodbox Public Share userShare.class.php add privilege escalation CWE-434 5.6 Medium 2026-03-26
CVE-2026-4592 kalcaddle kodbox Password Login index.class.php tfaVerify improper authentication CWE-287 5.6 Medium 2026-03-23
CVE-2026-4591 kalcaddle kodbox fileThumb Endpoint app.php checkBin os command injection CWE-78 4.7 Medium 2026-03-23
CVE-2026-4590 kalcaddle kodbox loginSubmit API index.class.php cross-site request forgery CWE-352 3.1 Low 2026-03-23
CVE-2026-4589 kalcaddle kodbox fileGet Endpoint editor.class.php PathDriverUrl server-side request forgery CWE-918 6.3 Medium 2026-03-23
CVE-2026-4588 kalcaddle kodbox Site-level API key shareOut.class.php shareSafeGroup hard-coded key CWE-321 3.7 Low 2026-03-23
CVE-2026-2560 kalcaddle kodbox Media File Preview Plugin VideoResize.class.php run os command injection CWE-78 6.3 Medium 2026-02-16
CVE-2026-1066 kalcaddle kodbox Compression zip command injection CWE-77 6.3 Medium 2026-01-17
CVE-2025-11016 kalcaddle kodbox index.class.php fileOut path traversal CWE-22 4.3 Medium 2025-09-26
CVE-2025-10233 kalcaddle kodbox editor.class.php fileSave path traversal CWE-22 6.3 Medium 2025-09-10
CVE-2025-9414 kalcaddle kodbox Download from Link serverDownload server-side request forgery CWE-918 4.7 Medium 2025-08-25
CVE-2023-6849 kalcaddle kodbox app.php cover server-side request forgery CWE-918 7.3 High 2023-12-16
CVE-2023-6848 kalcaddle kodbox index.class.php check command injection CWE-77 7.3 High 2023-12-16
CVE-2023-3607 kodbox WebConsole Plug-In webconsole.php.txt Execute os command injection CWE-78 5.5 Medium 2023-07-10

All 19 known CVE vulnerabilities affecting kodbox with full Chinese analysis, references, and POCs where available.