Skip to content
OpenAdvisories

Vendor

ICEcoder

5 known vulnerabilities.

Products

ICEcoder 4 icecoder/icecoder 1
All Critical High Medium Low Exploited only Public exploit

3 results · Clear filters · Feed

  • High 8.3
    CVE-2026-64838

    ICEcoder through 8.1 Path Traversal via oldFileName Parameter

    ICEcoder versions through 8.1 fail to properly validate the oldFileName parameter in file move and rename operations, allowing authenticated users to relocate files from outside the document root. Attackers can use path traversal sequences in oldFileName to m…

    ICEcoder ICEcoder
  • High 8.8
    CVE-2026-64837

    ICEcoder through 8.1 OS Command Injection via lib/properties.php

    ICEcoder through 8.1 passes an unescaped filesystem path into a shell command in lib/properties.php, allowing authenticated users to inject OS commands through directory names. Attackers can create directories with shell metacharacters in their names and acce…

    ICEcoder ICEcoder
  • High 8.8
    CVE-2026-64836

    ICEcoder through 8.1 Path Traversal via Ineffective File::check() Confinement

    ICEcoder versions through 8.1 contain a path traversal vulnerability in the file-control endpoint due to a logic error in the document-root confinement check. The File::check() validation function compares realpath() to boolean true, which never succeeds, all…

    ICEcoder ICEcoder