ICEcoder Path Traversal vulnerability

概要

参考情報

• nvd.nist.gov/vuln/detail/CVE-2024-41373 · ADVISORY
• icecoder/ICEcoder · PACKAGE
• xjzzzxx/vulFound · WEB

icecoder/icecoder のその他の脆弱性

• CVE-2024-41375中 6.1ICEcoder 8.1 is vulnerable to Cross Site Scripting (XSS) via lib/terminal-xhr.php
• CVE-2024-41374中 6.1ICEcoder 8.1 is vulnerable to Cross Site Scripting (XSS) via lib/settings-screen.php
• CVE-2022-34026高 7.5ICEcoder v8.1 allows attackers to execute a directory traversal.
• CVE-2021-3862中 4.8icecoder is vulnerable to Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
• CVE-2021-32106中 5.4In ICEcoder 8.0 allows, a reflected XSS vulnerability was identified in the multipe-results.php page due to insufficient sanitization of the…