Kalcaddle vulnerabilities

Products

• Kodbox 20
• Kodexplorer 7

Newest

• collabora kodexplorer KodExplorer < 4.55 Path Traversal via unzip_pre_name() ZIP Extraction CVE-2026-104081 7.2 HighOctober 9, 2026
• kalcaddle kodbox kalcaddle kodbox SSO API Login apiLogin redirect CVE-2026-18721 5.3 MediumAugust 4, 2026
• kalcaddle kodbox kalcaddle kodbox msgWarning Plugin action improper authorization CVE-2026-18720 6.9 MediumAugust 4, 2026
• kalcaddle kodbox kalcaddle Kodbox fileThumb Plugin VideoResize.class.php parseVideoInfo command injection CVE-2026-8753 5.3 MediumMay 17, 2026
• kalcaddle kodbox kalcaddle kodbox shareMake/shareCheck server-side request forgery CVE-2026-5618 6.3 MediumApril 6, 2026
• kalcaddle kodbox kalcaddle kodbox Password-protected Share auth.class.php can improper authentication CVE-2026-4831 6.3 MediumMarch 26, 2026
• kalcaddle kodbox kalcaddle kodbox Public Share userShare.class.php add privilege escalation CVE-2026-4830 6.3 MediumMarch 26, 2026
• kalcaddle kodbox kalcaddle kodbox Password Login index.class.php tfaVerify improper authentication CVE-2026-4592 6.3 MediumMarch 23, 2026
• kalcaddle kodbox kalcaddle kodbox fileThumb Endpoint app.php checkBin os command injection CVE-2026-4591 5.1 MediumMarch 23, 2026
• kalcaddle kodbox kalcaddle kodbox loginSubmit API index.class.php cross-site request forgery CVE-2026-4590 2.3 LowMarch 23, 2026
• kalcaddle kodbox kalcaddle kodbox fileGet Endpoint editor.class.php PathDriverUrl server-side request forgery CVE-2026-4589 5.3 MediumMarch 23, 2026
• kalcaddle kodbox kalcaddle kodbox Site-level API key shareOut.class.php shareSafeGroup hard-coded key CVE-2026-4588 6.3 MediumMarch 23, 2026
• kalcaddle kodbox kalcaddle kodbox Media File Preview Plugin VideoResize.class.php run os command injection CVE-2026-2560 5.3 MediumFebruary 16, 2026
• kalcaddle kodbox kalcaddle kodbox Compression zip command injection CVE-2026-1066 5.3 MediumJanuary 17, 2026
• kalcaddle kodbox kalcaddle kodbox index.class.php fileOut path traversal CVE-2025-11016 5.3 MediumSeptember 26, 2025
• kalcaddle kodbox kalcaddle kodbox editor.class.php fileSave path traversal CVE-2025-10233 5.3 MediumSeptember 10, 2025
• kalcaddle kodbox kalcaddle kodbox Download from Link serverDownload server-side request forgery CVE-2025-9414 5.1 MediumAugust 25, 2025
• kalcaddle kodbox An issue in kodbox v.1.52.04 and before allows a remote attacker to obtain sensitive information... CVE-2024-51037 5.3 MediumNovember 15, 2024
• collabora kodexplorer kalcaddle KodExplorer app.php index server-side request forgery CVE-2023-6853 6.3 MediumDecember 16, 2023
• collabora kodexplorer kalcaddle KodExplorer app.php server-side request forgery CVE-2023-6852 6.3 MediumDecember 16, 2023
• collabora kodexplorer kalcaddle KodExplorer ZIP Archive app.php unzipList code injection CVE-2023-6851 6.3 MediumDecember 16, 2023
• collabora kodexplorer kalcaddle KodExplorer API Endpoint unrestricted upload CVE-2023-6850 6.3 MediumDecember 16, 2023
• kalcaddle kodbox kalcaddle kodbox app.php cover server-side request forgery CVE-2023-6849 7.3 HighDecember 16, 2023
• kalcaddle kodbox kalcaddle kodbox index.class.php check command injection CVE-2023-6848 7.3 HighDecember 16, 2023
• kalcaddle kodbox kodbox WebConsole Plug-In webconsole.php.txt Execute os command injection CVE-2023-3607 5.5 MediumJuly 10, 2023
• collabora kodexplorer kalcaddle KodExplorer cross-site request forgery CVE-2022-4944 Public exploit 4.3 MediumApril 22, 2023
• collabora kodexplorer Arbitrary file access in KodExplorer CVE-2022-46154 8.6 HighDecember 6, 2022