ICEcoder vulnerable to Path Traversal

概要

参考情報

• nvd.nist.gov/vuln/detail/CVE-2022-34026 · ADVISORY
• gist.github.com/enferas/85cdbadf5cba32ec7c8db6ea9e6833bf · WEB
• icecoder/ICEcoder · PACKAGE
• icecoder/ICEcoder · WEB
• icecoder/ICEcoder · WEB
• icecoder.com · WEB

icecoder/icecoder のその他の脆弱性

• CVE-2024-41375中 6.1ICEcoder 8.1 is vulnerable to Cross Site Scripting (XSS) via lib/terminal-xhr.php
• CVE-2024-41374中 6.1ICEcoder 8.1 is vulnerable to Cross Site Scripting (XSS) via lib/settings-screen.php
• CVE-2024-41373中 6.3ICEcoder 8.1 contains a Path Traversal vulnerability via lib/backup-versions-preview-loader.php.
• CVE-2021-3862中 4.8icecoder is vulnerable to Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
• CVE-2021-32106中 5.4In ICEcoder 8.0 allows, a reflected XSS vulnerability was identified in the multipe-results.php page due to insufficient sanitization of the…