Lucene search
+L

71 matches found

Huntr
Huntr
added 2022/01/14 9:30 a.m.26 views

Cross-site Scripting (XSS) - Reflected in icecoder/icecoder

Description Cross-Site Scripting XSS attacks are a type of injection, in which malicious scripts are injected into websites. An attacker can use XSS to send a malicious script to an unsuspecting user. The end user’s browser has no way to know that the script should not be trusted, and will execut...

3.5CVSS5AI score0.00668EPSS
SaveExploits1References2
Github Security Blog
Github Security Blog
added 2021/09/09 5:11 p.m.44 views

Cross-site scripting in ICEcoder

In ICEcoder 8.0 allows, a reflected XSS vulnerability was identified in the multipe-results.php page due to insufficient sanitization of the GET'replace' variable. As a result, arbitrary Javascript code can get executed...

5.4CVSS3.4AI score0.00859EPSS
SaveExploits1References6Affected Software1
OSV
OSV
added 2021/09/09 5:11 p.m.18 views

GHSA-JF9V-Q8VH-3FMC Cross-site scripting in ICEcoder

In ICEcoder 8.0 allows, a reflected XSS vulnerability was identified in the multipe-results.php page due to insufficient sanitization of the GET'replace' variable. As a result, arbitrary Javascript code can get executed...

5.4CVSS5.3AI score0.00859EPSS
SaveExploits1References5
BDU FSTEC
BDU FSTEC
added 2021/06/29 12:0 a.m.9 views

Vulnerability of the multipe-results.php component of the ICEcoder browser code editor.

The vulnerability of the multipe-results.php component of the ICEcoder browser editor is related to the lack of protective measures for website structures. Exploiting this vulnerability allows a remote attacker to perform cross-site scripting attacks...

5.5CVSS5.7AI score0.00859EPSS
SaveExploits1References3Affected Software1
OSV
OSV
added 2021/06/08 1:15 p.m.16 views

CVE-2021-32106

In ICEcoder 8.0 allows, a reflected XSS vulnerability was identified in the multipe-results.php page due to insufficient sanitization of the GET'replace' variable. As a result, arbitrary Javascript code can get executed...

5.4CVSS6.2AI score
SaveExploits0References3
NVD
NVD
added 2021/06/08 1:15 p.m.14 views

CVE-2021-32106

In ICEcoder 8.0 allows, a reflected XSS vulnerability was identified in the multipe-results.php page due to insufficient sanitization of the GET'replace' variable. As a result, arbitrary Javascript code can get executed...

5.4CVSS0.00859EPSS
SaveExploits1References3
ATTACKERKB
ATTACKERKB
added 2021/06/08 1:15 p.m.3 views

CVE-2021-32106

In ICEcoder 8.0 allows, a reflected XSS vulnerability was identified in the multipe-results.php page due to insufficient sanitization of the GET'replace' variable. As a result, arbitrary Javascript code can get executed...

5.4CVSS6.3AI score0.00859EPSS
SaveExploits1References4
Prion
Prion
added 2021/06/08 1:15 p.m.13 views

Cross site scripting

In ICEcoder 8.0 allows, a reflected XSS vulnerability was identified in the multipe-results.php page due to insufficient sanitization of the GET'replace' variable. As a result, arbitrary Javascript code can get executed...

3.5CVSS5.3AI score0.00859EPSS
SaveExploits1References3Affected Software1
Cvelist
Cvelist
added 2021/06/08 12:40 p.m.21 views

CVE-2021-32106

In ICEcoder 8.0 allows, a reflected XSS vulnerability was identified in the multipe-results.php page due to insufficient sanitization of the GET'replace' variable. As a result, arbitrary Javascript code can get executed...

5.6AI score0.00859EPSS
SaveExploits1References3
CVE
CVE
added 2021/06/08 12:40 p.m.80 views

CVE-2021-32106

CVE-2021-32106 affects ICEcoder 8.0. The connected documents describe a reflected XSS in the multipe-results.php page caused by insufficient sanitization of the GET['replace'] parameter, allowing arbitrary JavaScript code execution. The vulnerability is documented across multiple feeds (NVD, Red ...

5.4CVSS5.3AI score0.00859EPSS
SaveExploits1References3Affected Software1
CNNVD
CNNVD
added 2021/06/08 12:0 a.m.8 views

ICEcoder 跨站脚本漏洞

ICEcoder is a browser-based code editor that provides a modern approach to building websites. By allowing you to write code directly in your web browser. A security vulnerability exists in ICEcoder 8.0, which has been found to reflect an XSS vulnerability in the multi- results.php page due to...

5.4CVSS5.7AI score0.00859EPSS
SaveExploits1References3
Rows per page
Query Builder