Lucene search
+L

112 matches found

Huntr
Huntr
•added 2022/01/14 9:30 a.m.•30 views

Cross-site Scripting (XSS) - Reflected in icecoder/icecoder

Description Cross-Site Scripting XSS attacks are a type of injection, in which malicious scripts are injected into websites. An attacker can use XSS to send a malicious script to an unsuspecting user. The end user’s browser has no way to know that the script should not be trusted, and will execut...

3.5CVSS5AI score0.00659EPSS
SaveExploits1References2
Github Security Blog
Github Security Blog
•added 2021/09/09 5:11 p.m.•52 views

Cross-site scripting in ICEcoder

In ICEcoder 8.0 allows, a reflected XSS vulnerability was identified in the multipe-results.php page due to insufficient sanitization of the GET'replace' variable. As a result, arbitrary Javascript code can get executed...

5.4CVSS3.4AI score0.00859EPSS
SaveExploits1References6Affected Software1
OSV
OSV
•added 2021/09/09 5:11 p.m.•32 views

GHSA-JF9V-Q8VH-3FMC Cross-site scripting in ICEcoder

In ICEcoder 8.0 allows, a reflected XSS vulnerability was identified in the multipe-results.php page due to insufficient sanitization of the GET'replace' variable. As a result, arbitrary Javascript code can get executed...

5.4CVSS5.3AI score0.00859EPSS
SaveExploits1References5
BDU FSTEC
BDU FSTEC
•added 2021/06/29 12:00 a.m.•12 views

Vulnerability of the multipe-results.php component of the ICEcoder browser code editor.

The vulnerability of the multipe-results.php component of the ICEcoder browser editor is related to the lack of protective measures for website structures. Exploiting this vulnerability allows a remote attacker to perform cross-site scripting attacks...

5.5CVSS5.7AI score0.00859EPSS
SaveExploits1References3Affected Software1
OSV
OSV
•added 2021/06/08 1:15 p.m.•21 views

CVE-2021-32106

In ICEcoder 8.0 allows, a reflected XSS vulnerability was identified in the multipe-results.php page due to insufficient sanitization of the GET'replace' variable. As a result, arbitrary Javascript code can get executed...

5.4CVSS6.2AI score
SaveExploits0References3
NVD
NVD
•added 2021/06/08 1:15 p.m.•21 views

CVE-2021-32106

In ICEcoder 8.0 allows, a reflected XSS vulnerability was identified in the multipe-results.php page due to insufficient sanitization of the GET'replace' variable. As a result, arbitrary Javascript code can get executed...

5.4CVSS0.00859EPSS
SaveExploits1References3
attackerkb
attackerkb
•added 2021/06/08 1:15 p.m.•9 views

CVE-2021-32106

In ICEcoder 8.0 allows, a reflected XSS vulnerability was identified in the multipe-results.php page due to insufficient sanitization of the GET'replace' variable. As a result, arbitrary Javascript code can get executed...

5.4CVSS6.3AI score0.00859EPSS
SaveExploits1References4
Prion
Prion
•added 2021/06/08 1:15 p.m.•21 views

Cross site scripting

In ICEcoder 8.0 allows, a reflected XSS vulnerability was identified in the multipe-results.php page due to insufficient sanitization of the GET'replace' variable. As a result, arbitrary Javascript code can get executed...

3.5CVSS5.3AI score0.00859EPSS
SaveExploits1References3Affected Software1
Cvelist
Cvelist
•added 2021/06/08 12:40 p.m.•31 views

CVE-2021-32106

In ICEcoder 8.0 allows, a reflected XSS vulnerability was identified in the multipe-results.php page due to insufficient sanitization of the GET'replace' variable. As a result, arbitrary Javascript code can get executed...

5.6AI score0.00859EPSS
SaveExploits1References3
CVE
CVE
•added 2021/06/08 12:40 p.m.•95 views

CVE-2021-32106

CVE-2021-32106 affects ICEcoder 8.0. The connected documents describe a reflected XSS in the multipe-results.php page caused by insufficient sanitization of the GET['replace'] parameter, allowing arbitrary JavaScript code execution. The vulnerability is documented across multiple feeds (NVD, Red ...

5.4CVSS5.3AI score0.00859EPSS
SaveExploits1References3Affected Software1
CNNVD
CNNVD
•added 2021/06/08 12:00 a.m.•18 views

ICEcoder 跨站脚本漏洞

ICEcoder is a browser-based code editor that provides a modern approach to building websites. By allowing you to write code directly in your web browser. A security vulnerability exists in ICEcoder 8.0, which has been found to reflect an XSS vulnerability in the multi- results.php page due to...

5.4CVSS5.7AI score0.00859EPSS
SaveExploits1References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2021/06/08 12:00 a.m.•8 views

CVE-2021-32106: Improper Neutralization of Input During Web Page Generation

In ICEcoder 8.0 allows, a reflected XSS vulnerability was identified in the multipe-results.php page due to insufficient sanitization of the GET'replace' variable. As a result, arbitrary Javascript code can get executed...

5.4CVSS6AI score0.00859EPSS
SaveExploits1References2
Rows per page
Query Builder