Skip to content

Vendor

XODA vulnerabilities

1 published CVE affecting XODA, from public sources (CVE.org, NVD, CISA KEV, FIRST EPSS, OSV).

Total
1
Critical
1
High
0
Medium
0
Low
0
Unscored
0
CISA KEV
0
Atom feed of XODA alerts

Products

Latest XODA CVEs

Newest publication first

  1. CVE-2012-10045 XODA 0.4.5 Arbitrary PHP File Upload

    Published
    CriticalCVSS 9.3 EPSS 1.9% Framework module

    XODA version 0.4.5 contains an unauthenticated file upload vulnerability that allows remote attackers to execute arbitrary PHP code on the server. The flaw resides in the upload functionality, which fails to properly validate or restrict uploaded file types. By crafting a multipa...

Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.