Scriptcase: >> Scriptcase >> 9.2.005 Security Vulnerabilities
Scriptcase v9.10.023 and before is vulnerable to Remote Code Execution (RCE) via the nm_zip function.
CVSS Score
8.0
EPSS Score
0.007
Published
2024-10-01
Scriptcase v.9.10.023 and before is vulnerable to Cross Site Scripting (XSS) in nm_cor.php via the form and field parameters.
CVSS Score
5.4
EPSS Score
0.001
Published
2024-10-01
Scriptcase 9.10.023 and before is vulnerable to Remote Code Execution (RCE) via the nm_unzip function.
CVSS Score
8.0
EPSS Score
0.006
Published
2024-10-01
Scriptcase v9.10.023 and before is vulnerable to Cross Site Scripting (XSS). An authenticated user can craft malicious payloads using the messages feature, which allows the injection of malicious code into any user's account on the platform. It is important to note that regular users can trigger actions for administrator users.
CVSS Score
5.4
EPSS Score
0.001
Published
2024-10-01
Scriptcase v9.10.023 and before is vulnerable to Cross Site Scripting (XSS) in proj_new.php via the Descricao parameter.
CVSS Score
6.1
EPSS Score
0.0
Published
2024-10-01
Scriptcase v9.10.023 and before is vulnerable to Cross Site Scripting (XSS). An authenticated user can craft malicious payloads in the To-Do List. The assigned user will trigger a stored XSS, which is particularly dangerous because tasks are assigned to various users on the platform.
CVSS Score
5.4
EPSS Score
0.0
Published
2024-10-01
db_convert.php in ScriptCase through 9.9.008 is vulnerable to Arbitrary File Deletion by an admin via a directory traversal sequence in the file parameter.
CVSS Score
6.5
EPSS Score
0.067
Published
2023-03-27