CVSS: 5.4EPSS: 0%CPEs: 1EXPL: 0CVE-2023-45998
https://notcve.org/view.php?id=CVE-2023-45998
kodbox 1.44 is vulnerable to Cross Site Scripting (XSS). Customizing global HTML results in storing XSS. kodbox 1.44 es vulnerable a Cross Site Scripting (XSS). La personalización de HTML global da como resultado el almacenamiento de XSS. • https://gist.github.com/fangjiuye/703fdb643db558640f23e4e7c9532348 • CWE-79: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') •
CVSS: 8.0EPSS: 0%CPEs: 1EXPL: 1CVE-2023-3607 – kodbox WebConsole Plug-In webconsole.php.txt Execute os command injection
https://notcve.org/view.php?id=CVE-2023-3607
A vulnerability was found in kodbox 1.26. It has been declared as critical. This vulnerability affects the function Execute of the file webconsole.php.txt of the component WebConsole Plug-In. The manipulation leads to os command injection. The exploit has been disclosed to the public and may be used. • https://github.com/mohdkey/cve/blob/main/kodbox.md https://vuldb.com/?ctiid.233476 https://vuldb.com/?id.233476 • CWE-78: Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') •
CVSS: 7.5EPSS: 0%CPEs: 1EXPL: 0CVE-2023-29790
https://notcve.org/view.php?id=CVE-2023-29790
kodbox 1.2.x through 1.3.7 has a Sensitive Information Leakage issue. • https://blog.mo60.cn/index.php/archives/kodbox.html •
CVSS: 6.1EPSS: 0%CPEs: 1EXPL: 0CVE-2023-29791
https://notcve.org/view.php?id=CVE-2023-29791
kodbox <= 1.37 is vulnerable to Cross Site Scripting (XSS) via the debug information. • https://blog.mo60.cn/index.php/archives/kodbox-xss.html • CWE-79: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') •