Approved changes feed: RSS · Atom

cpe:2.3:a:kodcloud:kodbox:1.61:*:*:*:*:*:*:*

part: a version: 1.61 update: *

VendorKodcloud (60b2f920-7b74-5a88-9e25-d87a54e3d5b5)
ProductKodbox (89e0a281-0726-5e54-b960-871fc2790305)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2025-9414 vulnerable 2026-06-08 07:45:22.444806 kalcaddle kodbox Download from Link serverDownload server-side request forgery
MEDIUM (4.7)
A vulnerability was found in kalcaddle kodbox 1.61. Affected by this vulnerability is an unknown functionality of the file /?explorer/upload/serverDownload of the component Download from Link Handler. Performing manipulation of the argument url results in server-side request forgery. Remote exploitation of the attack is possible. The exploit has been made public and could be used. The vendor was contacted early about this disclosure but did not respond in any way.
Published: 2025-08-25T18:32:07.112Z
Updated: 2025-08-25T19:00:18.358Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-10233 vulnerable 2026-06-08 07:02:26.482885 kalcaddle kodbox editor.class.php fileSave path traversal
MEDIUM (6.3)
A security vulnerability has been detected in kalcaddle kodbox 1.61. This affects the function fileGet/fileSave of the file app/controller/explorer/editor.class.php. The manipulation of the argument path leads to path traversal. The attack can be initiated remotely. The exploit has been disclosed publicly and may be used. The vendor was contacted early about this disclosure but did not respond in any way.
Published: 2025-09-10T23:02:05.674Z
Updated: 2025-09-11T14:29:03.494Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.