Description

ICEcoder v8.1 allows attackers to execute a directory traversal.

Related CPE's

a

icecoder

icecoder

8.1

Vulnerable

References

http://icecoder.com

Vendor Advisory

https://gist.github.com/enferas/85cdbadf5cba32ec7c8db6ea9e6833bf

ExploitThird Party Advisory

https://github.com/icecoder/ICEcoder

Third Party Advisory

https://github.com/icecoder/ICEcoder/blob/master/classes/Settings.php

ExploitThird Party Advisory

https://github.com/icecoder/ICEcoder/blob/master/lib/settings.php

ExploitThird Party Advisory

Weaknesses

[email protected]

Primary
CWE-22

CVSS impact metrics

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

7.5 · High

  • CVSS V3.1

  • CVSS V3.0

  • CVSS V2.0

Information

Source identifier

[email protected]

Vulnerability status

Analyzed

Published

2022-09-22T18:15:09.983

2 years ago

Last modified

2022-09-24T02:35:28.383

2 years ago