ICEcoder v8.1 allows attackers to execute a directory traversal.
References
Link | Resource |
---|---|
http://icecoder.com | Vendor Advisory |
https://gist.github.com/enferas/85cdbadf5cba32ec7c8db6ea9e6833bf | Exploit Third Party Advisory |
https://github.com/icecoder/ICEcoder | Third Party Advisory |
https://github.com/icecoder/ICEcoder/blob/master/classes/Settings.php | Exploit Third Party Advisory |
https://github.com/icecoder/ICEcoder/blob/master/lib/settings.php | Exploit Third Party Advisory |
Configurations
History
24 Sep 2022, 02:35
Type | Values Removed | Values Added |
---|---|---|
CVSS |
v2 : v3 : |
v2 : unknown
v3 : 7.5 |
CWE | CWE-22 | |
First Time |
Icecoder
Icecoder icecoder |
|
CPE | cpe:2.3:a:icecoder:icecoder:8.1:*:*:*:*:*:*:* | |
References | (MISC) https://github.com/icecoder/ICEcoder - Third Party Advisory | |
References | (MISC) https://github.com/icecoder/ICEcoder/blob/master/classes/Settings.php - Exploit, Third Party Advisory | |
References | (MISC) https://github.com/icecoder/ICEcoder/blob/master/lib/settings.php - Exploit, Third Party Advisory | |
References | (MISC) http://icecoder.com - Vendor Advisory | |
References | (MISC) https://gist.github.com/enferas/85cdbadf5cba32ec7c8db6ea9e6833bf - Exploit, Third Party Advisory |
22 Sep 2022, 19:24
Type | Values Removed | Values Added |
---|---|---|
New CVE |
Information
Published : 2022-09-22 18:15
Updated : 2023-12-10 14:35
NVD link : CVE-2022-34026
Mitre link : CVE-2022-34026
CVE.ORG link : CVE-2022-34026
JSON object : View
Products Affected
icecoder
- icecoder
CWE
CWE-22
Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')