可道云KodBox 存在弱口令漏洞

Description

PoC

None yet. Search at https://trap.biu.life/?ref=rss

References

• https://avd.aliyun.com/detail?id=AVD-2021-902897
• https://github.com/kalcaddle/kodbox/blob/main/ChangeLog.md
• https://stack.chaitin.com/vuldb/detail/0f61f093-e4b0-4646-be84-3789cd11099d
• https://www.ddpoc.com/DVB-2024-6709.html
• https://kodcloud.com/
• https://blog.mo60.cn/index.php/tag/kodbox/
• https://www.q2019.com/2025/06/23/3910/
• https://laosu.tech/2021/10/13/%E4%BD%93%E9%AA%8C%E9%87%8D%E6%9E%84%E7%89%88%E7%9A%84%E5%8F%AF%E9%81%93%E4%BA%91Kodbox/
• https://app.opencve.io/cve/?vendor=kodcloud
• https://vuldb.com/?id.352428

Related Vulnerabilities

• PoCkodbox-installer: Kodbox Installation Page - Exposure
• Kalcaddle Kodbox CVE-2023-6848 命令注入漏洞
• 可道云KodBox 存在任意文件读取漏洞
• 可道云KodBox 后台存在任意文件上传漏洞
• 可道云KodBox 存在用户名枚举漏洞(CVE-2023-48028)
• 可道云KodBox 管理员添加存在鉴权绕过漏洞
• 可道云KodBox 存在SSRF漏洞