Description
kalcaddle kodbox (网络文件管理器)中存在命令注入漏洞，此漏洞是由于index.class.php未充分验证用户输入的数据所导致的。
Kalcaddle Kodbox CVE-2023-6848 命令注入漏洞
PoC
None yet. Search at https://trap.biu.life/?ref=rssReferences
https://nvd.nist.gov/vuln/detail/CVE-2023-6848
https://www.cve.org/CVERecord?id=CVE-2023-6848
https://github.com/advisories/GHSA-2372-3r49-c89c
https://avd.aliyun.com/detail?id=AVD-2023-6848
https://cve.imfht.com/detail/CVE-2023-6848
https://cn-sec.com/archives/2310258.html
https://vuldb.com/vuln/248209
https://vulmon.com/searchpage?q=kalcaddle%20kodbox
https://access.redhat.com/security/cve/cve-2023-6848
https://mdr.skyeye.qianxin.com/forum/share/2777