Kalcaddle vulnerabilities
25 CVEs and advisories name Kalcaddle as an affected vendor, newest first. Follow it as a feed.
- CVE-2026-104081KodExplorer < 4.55 Path Traversal via unzip_pre_name() ZIP Extraction
- CVE-2026-18721kalcaddle kodbox SSO API Login apiLogin redirect
- CVE-2026-18720kalcaddle kodbox msgWarning Plugin action improper authorization
- CVE-2026-8753kalcaddle Kodbox fileThumb Plugin VideoResize.class.php parseVideoInfo command injection
- CVE-2026-5618kalcaddle kodbox shareMake/shareCheck server-side request forgery
- CVE-2026-4831kalcaddle kodbox Password-protected Share auth.class.php can improper authentication
- CVE-2026-4830kalcaddle kodbox Public Share userShare.class.php add privilege escalation
- CVE-2026-4592kalcaddle kodbox Password Login index.class.php tfaVerify improper authentication
- CVE-2026-4591kalcaddle kodbox fileThumb Endpoint app.php checkBin os command injection
- CVE-2026-4590kalcaddle kodbox loginSubmit API index.class.php cross-site request forgery
- CVE-2026-4589kalcaddle kodbox fileGet Endpoint editor.class.php PathDriverUrl server-side request forgery
- CVE-2026-4588kalcaddle kodbox Site-level API key shareOut.class.php shareSafeGroup hard-coded key
- CVE-2026-2560kalcaddle kodbox Media File Preview Plugin VideoResize.class.php run os command injection
- CVE-2026-1066kalcaddle kodbox Compression zip command injection
- CVE-2025-11016kalcaddle kodbox index.class.php fileOut path traversal
- CVE-2025-10233kalcaddle kodbox editor.class.php fileSave path traversal
- CVE-2025-9414kalcaddle kodbox Download from Link serverDownload server-side request forgery
- CVE-2023-6853kalcaddle KodExplorer app.php index server-side request forgery
- CVE-2023-6852kalcaddle KodExplorer app.php server-side request forgery
- CVE-2023-6851kalcaddle KodExplorer ZIP Archive app.php unzipList code injection
- CVE-2023-6850kalcaddle KodExplorer API Endpoint unrestricted upload
- CVE-2023-6849kalcaddle kodbox app.php cover server-side request forgery
- CVE-2023-6848kalcaddle kodbox index.class.php check command injection
- CVE-2022-4944kalcaddle KodExplorer cross-site request forgery
- CVE-2022-46154Arbitrary file access in KodExplorer