ICEcoder / ICEcoder
6 CVEs
| CVE ID | Description | Severity | CVSS | Published |
|---|---|---|---|---|
| CVE-2026-64838 | ICEcoder through 8.1 Path Traversal via oldFileName Parameter | HIGH | 8.7 | Sep 10, 2026 |
| CVE-2026-64837 | ICEcoder through 8.1 OS Command Injection via lib/properties.php | HIGH | 8.7 | Sep 10, 2026 |
| CVE-2026-64836 | ICEcoder through 8.1 Path Traversal via Ineffective File::check() Confinement | HIGH | 8.7 | Sep 10, 2026 |
| CVE-2026-63722 | ICEcoder 8.1 Unauthenticated RCE via terminal-xhr.php | HIGH | 8.7 | Aug 19, 2026 |
| CVE-2024-41375 | ICEcoder 8.1 is vulnerable to Cross Site Scripting (XSS) via lib/terminal-xhr.php | HIGH | 7.1 | Jul 26, 2024 |
| CVE-2024-41374 | ICEcoder 8.1 is vulnerable to Cross Site Scripting (XSS) via lib/settings-screen.php | HIGH | 7.1 | Jul 26, 2024 |
| CVE-2024-41373 | ICEcoder 8.1 contains a Path Traversal vulnerability via lib/backup-versions-preview-loader.php. | MEDIUM | 5.3 | Jul 26, 2024 |
| CVE-2022-34026 | ICEcoder v8.1 allows attackers to execute a directory traversal. | HIGH | 7.5 | Sep 22, 2022 |
| CVE-2021-3862 | Cross-site Scripting (XSS) - Reflected in icecoder/icecoder | MEDIUM | 4.8 | Jan 17, 2022 |
| CVE-2021-32106 | In ICEcoder 8.0 allows, a reflected XSS vulnerability was identified in the multipe-results.php page due to insufficient sanitization of the _GET['replace'] va… | MEDIUM | 5.4 | Jun 8, 2021 |
Showing 1 to 6 of 6 CVEs