CVE-2022-4944— kalcaddle KodExplorer cross-site request forgery
Get alerts for future matching vulnerabilitiesLog in to subscribe
I. Basic Information for CVE-2022-4944
Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗ Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
kalcaddle KodExplorer cross-site request forgery
Source: NVD (National Vulnerability Database)
Vulnerability Description
A vulnerability, which was classified as problematic, has been found in kalcaddle KodExplorer up to 4.49. Affected by this issue is some unknown functionality. The manipulation leads to cross-site request forgery. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. Upgrading to version 4.50 is able to address this issue. It is recommended to upgrade the affected component. The identifier of this vulnerability is VDB-227000.
Source: NVD (National Vulnerability Database)
CVSS Information
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N
Source: NVD (National Vulnerability Database)
Vulnerability Type
跨站请求伪造(CSRF)
Source: NVD (National Vulnerability Database)
Vulnerability Title
KodExplorer 跨站请求伪造漏洞
Source: CNNVD (China National Vulnerability Database)
Vulnerability Description
KodExplorer是warlee个人开发者的一个 web 文件管理器。 KodExplorer 4.49 之前版本存在跨站请求伪造漏洞，该漏洞源于存在未知函数，导致跨站请求伪造漏洞。
Source: CNNVD (China National Vulnerability Database)
CVSS Information
N/A
Source: CNNVD (China National Vulnerability Database)
Vulnerability Type
N/A
Source: CNNVD (China National Vulnerability Database)
Affected Products
| Vendor | Product | Affected Versions | CPE | Subscribe |
|---|---|---|---|---|
| kalcaddle | KodExplorer | 4.0 | - |
II. Public POCs for CVE-2022-4944
| # | POC Description | Source Link | Shenlong Link |
|---|---|---|---|
| 1 | 「💥」CVE-2022-4944: KodExplorer <= 4.49 - CSRF to Arbitrary File Upload | https://github.com/MrEmpy/CVE-2022-4944 | POC Details |
| 2 | 「💥」CVE-2022-4944: KodExplorer <= 4.49 - CSRF to Arbitrary File Upload | https://github.com/brosck/CVE-2022-4944 | POC Details |
AI-Generated POCPremium
No public POC found.
Login to generate AI POCIII. Intelligence Information for CVE-2022-4944
请登录查看更多情报信息。
IV. Related Vulnerabilities
Same product: KodExplorer
- CVE-2026-6572
Collabora KodExplorer fileUpload Endpoint share.class.php im - CVE-2026-6571
kodcloud KodExplorer systemRole.class.php roleGroupAction au - CVE-2026-6570
kodcloud KodExplorer systemMember.class.php initInstall auth - CVE-2026-6569
kodcloud KodExplorer fileGet Endpoint share.class.php improp - CVE-2026-6568
kodcloud KodExplorer Public Share share.class.php initShareO
Same vendor: kalcaddle
- CVE-2026-5618
kalcaddle kodbox shareMake/shareCheck server-side request fo - CVE-2026-4831
kalcaddle kodbox Password-protected Share auth.class.php can - CVE-2026-4830
kalcaddle kodbox Public Share userShare.class.php add privil - CVE-2026-4592
kalcaddle kodbox Password Login index.class.php tfaVerify im - CVE-2026-4591
kalcaddle kodbox fileThumb Endpoint app.php checkBin os comm
Same weakness: CWE-352
- CVE-2021-47953
OpenCart 3.0.3.7 Cross-Site Request Forgery via account/pass - CVE-2021-47946
OpenCart 3.0.36 Account Takeover via Cross Site Request Forg - CVE-2022-50955
WordPress Plugin Curtain 1.0.2 Cross-site Request Forgery - CVE-2026-8194
osTicket Dispatcher class.dispatcher.php cross-site request - CVE-2026-42286
Emlog: Cross-Site Request Forgery in Admin Functions
V. Comments for CVE-2022-4944
Anonymous User
2026-01-15 06:08:37Zaproxy alias impedit expedita quisquam pariatur exercitationem. Nemo rerum eveniet dolores rem quia dignissimos.