TI-2022-15006 CVE-2022-34026 · GHSA-fvf5-xp83-vrqp
ICEcoder v8.1 allows attackers to execute a directory traversal.
Priority HIGH 72
ICEcoder v8.1 allows attackers to execute a directory traversal.
ICEcoder
Records10All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical0CVSS 9.0–10.0
CVSS high5CVSS 7.0–8.9
Exploited now
ICEcoder records in CISA KEVNo ICEcoder vulnerabilities are listed in CISA KEV.
Components
Products in the NVD configurations · select one to filter the recordsRecords
6 records in Icecoder · all components
TI-2024-27614 CVE-2024-41373 · GHSA-x38c-v778-w56m
ICEcoder 8.1 contains a Path Traversal vulnerability via lib/backup-versions-preview-loader.php.
Priority MEDIUM 61
ICEcoder 8.1 contains a Path Traversal vulnerability via lib/backup-versions-preview-loader.php.
TI-2024-27616 CVE-2024-41375 · GHSA-5j47-3m62-7vr3
ICEcoder 8.1 is vulnerable to Cross Site Scripting (XSS) via lib/terminal-xhr.php
Priority MEDIUM 60
ICEcoder 8.1 is vulnerable to Cross Site Scripting (XSS) via lib/terminal-xhr.php
TI-2024-27615 CVE-2024-41374 · GHSA-xcr9-pm5w-gvh2
ICEcoder 8.1 is vulnerable to Cross Site Scripting (XSS) via lib/settings-screen.php
Priority MEDIUM 60
ICEcoder 8.1 is vulnerable to Cross Site Scripting (XSS) via lib/settings-screen.php
TI-2021-12057 CVE-2021-32106 · GHSA-jf9v-q8vh-3fmc
In ICEcoder 8.0 allows, a reflected XSS vulnerability was identified in the…
Priority LOW 26
In ICEcoder 8.0 allows, a reflected XSS vulnerability was identified in the multipe-results.php page due to insufficient sanitization of the _GET['replace'] variable.
TI-2021-02793 CVE-2021-3862 · GHSA-73q9-7pwj-gm46
Cross-site Scripting (XSS) - Reflected in icecoder/icecoder
Priority LOW 23
icecoder is vulnerable to Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')