Search Results (3 CVEs found)

CVE Vendors Products Updated CVSS v3.1
CVE-2025-34504 1 Kodcloud 1 Kodexplorer 2026-03-05 6.1 Medium
KodExplorer 4.52 contains an open redirect vulnerability in the user login page that allows attackers to manipulate the 'link' parameter. Attackers can craft malicious URLs in the link parameter to redirect users to arbitrary external websites after authentication.
CVE-2022-46154 1 Kodcloud 1 Kodexplorer 2025-04-23 8.6 High
Kodexplorer is a chinese language web based file manager and browser based code editor. Versions prior to 4.50 did not prevent unauthenticated users from requesting arbitrary files from the host OS file system. As a result any files available to the host process may be accessed by arbitrary users. This issue has been addressed in version 4.50. Users are advised to upgrade. There are no known workarounds for this issue.
CVE-2021-36646 1 Kodcloud 1 Kodexplorer 2024-11-21 6.1 Medium
A Cross Site Scrtpting (XSS) vulnerability in KodExplorer 4.45 allows remote attackers to run arbitrary code via /index.php page.