PRODUCT PROFILE

kodexplorer

暂无产品描述。

关联漏洞

共找到 2 条公开漏洞记录

中危CVE-2023-494892023/11/27

KodeExplorer 4.51 - Reflective Cross Site Scripting (XSS)

Reflective Cross Site Scripting (XSS) vulnerability in KodExplorer version 4.51, allows attackers to obtain sensitive information and escalate privileges via the APP_HOST parameter at config/i18n/en/main.php.

kodexplorerPoC 已收录

CVSS6.1EPSS 0.93%

中危CVE-2021-366462023/09/06

KodExplorer - Cross-Site Scripting

KodExplorer is susceptible to a reflected cross-site scripting (XSS) vulnerability in the file view functionality.The vulnerability exists in app/template/api/view.html where user-supplied input in the 'path' parameter is directly echoed without proper sanitization.This allows attackers to inject malicious JavaScript code that executes in the context of the user's browser.

kodexplorerPoC 已收录

CVSS6.1EPSS 1.5%