kalcaddle Kodbox

• CVE-2026-18721 Medium 4.3 kalcaddle kodbox SSO API Login apiLogin redirect 0.4%
• CVE-2026-18720 Medium 5.3 kalcaddle kodbox msgWarning Plugin action improper authorization 0.5%
• CVE-2026-8753 Medium 6.3 kalcaddle Kodbox fileThumb Plugin VideoResize.class.php parseVideoInfo command injection 1.9%
• CVE-2026-5618 Medium 5.6 kalcaddle kodbox shareMake/shareCheck server-side request forgery 0.3%
• CVE-2026-4831 Low 3.7 kalcaddle kodbox Password-protected Share auth.class.php can improper authentication 0.5%
• CVE-2026-4830 Medium 5.6 kalcaddle kodbox Public Share userShare.class.php add privilege escalation 0.3%
• CVE-2026-4592 Medium 5.6 kalcaddle kodbox Password Login index.class.php tfaVerify improper authentication 0.4%
• CVE-2026-4591 Medium 4.7 kalcaddle kodbox fileThumb Endpoint app.php checkBin os command injection 3.5%
• CVE-2026-4590 Low 3.1 kalcaddle kodbox loginSubmit API index.class.php cross-site request forgery 0.2%
• CVE-2026-4589 Medium 6.3 kalcaddle kodbox fileGet Endpoint editor.class.php PathDriverUrl server-side request forgery 0.2%
• CVE-2026-4588 Low 3.7 kalcaddle kodbox Site-level API key shareOut.class.php shareSafeGroup hard-coded key 0.3%
• CVE-2026-2560 Medium 6.3 kalcaddle kodbox Media File Preview Plugin VideoResize.class.php run os command injection 2.6%
• CVE-2026-1066 Medium 6.3 kalcaddle kodbox Compression zip command injection 5.5%
• CVE-2025-11016 Medium 4.3 kalcaddle kodbox index.class.php fileOut path traversal 0.5%
• CVE-2025-10233 Medium 6.3 kalcaddle kodbox editor.class.php fileSave path traversal 0.5%
• CVE-2025-9414 Medium 4.7 kalcaddle kodbox Download from Link serverDownload server-side request forgery 0.3%
• CVE-2023-6849 High 7.3 kalcaddle kodbox app.php cover server-side request forgery 0.9%
• CVE-2023-6848 High 7.3 kalcaddle kodbox index.class.php check command injection 2.3%