IC
Vendor
ICEcoder
10
CVEs
0
On KEV
0
New 30D
Products
Recent CVEs
| CVE | Product | CVSS | Published | Summary |
|---|---|---|---|---|
| CVE-2026-64838 | IC ICEcoder ICEcoder | 8.3 | Sep 10 | ICEcoder through 8.1 Path Traversal via oldFileName Parameter |
| CVE-2026-64837 | IC ICEcoder ICEcoder | 8.8 | Sep 10 | ICEcoder through 8.1 OS Command Injection via lib/properties.php |
| CVE-2026-64836 | IC ICEcoder ICEcoder | 8.8 | Sep 10 | ICEcoder through 8.1 Path Traversal via Ineffective File::check() Confinement |
| CVE-2026-63722 | IC ICEcoder ICEcoder | 9.8 | Aug 19 | ICEcoder 8.1 Unauthenticated RCE via terminal-xhr.php |
| CVE-2024-41375 | IC Icecoder Icecoder | 6.1 | Jul 26 | ICEcoder 8.1 is vulnerable to Cross Site Scripting (XSS) via lib/terminal-xhr.php |
| CVE-2024-41374 | IC Icecoder Icecoder | 6.1 | Jul 26 | ICEcoder 8.1 is vulnerable to Cross Site Scripting (XSS) via lib/settings-screen.php |
| CVE-2024-41373 | IC Icecoder Icecoder | 6.3 | Jul 26 | ICEcoder 8.1 contains a Path Traversal vulnerability via lib/backup-versions-preview-loader.php |
| CVE-2022-34026 | IC Icecoder Icecoder | 7.5 | Sep 22 | ICEcoder v8.1 allows attackers to execute a directory traversal |
| CVE-2021-3862 | IC Icecoder Icecoder | 4.8 | Jan 17 | icecoder is vulnerable to Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') |
| CVE-2021-32106 | IC Icecoder Icecoder | 5.4 | Jun 8 | In ICEcoder 8.0 allows, a reflected XSS vulnerability was identified in the multipe-results.php page due to insufficient sanitization of the _GET['replace'] variable |