Scriptcase

Scriptcase

14 Schwachstellen gefunden.

Hinweis: Diese Liste kann unvollständig sein. Daten werden ohne Gewähr im Ursprungsformat bereitgestellt.
9.8

CVE-2024-8940

  • EPSS 0.15%
  • Veröffentlicht 25.09.2024 01:15:48
  • Zuletzt bearbeitet 01.10.2024 17:21:01

Vulnerability in the Scriptcase application version 9.4.019, which involves the arbitrary upload of a file via /scriptcase/devel/lib/third/jquery_plugin/jQuery-File-Upload/server/php/ via a POST request. An attacker could upload malicious files to th...

5.3

CVE-2024-8941

  • EPSS 0.09%
  • Veröffentlicht 25.09.2024 01:15:48
  • Zuletzt bearbeitet 30.09.2024 19:45:43

Path traversal vulnerability in Scriptcase version 9.4.019, in /scriptcase/devel/compat/nm_edit_php_edit.php (in the “subpage” parameter), which allows unauthenticated remote users to bypass SecurityManager's intended restrictions and list and/or rea...

8.2

CVE-2024-8942

  • EPSS 0.1%
  • Veröffentlicht 25.09.2024 01:15:48
  • Zuletzt bearbeitet 30.09.2024 17:39:28

Vulnerability in Scriptcase version 9.4.019 that consists of a Cross-Site Scripting (XSS), due to the lack of input validation, affecting the “id_form_msg_title” parameter, among others. This vulnerability could allow a remote user to send a speciall...

6.5

CVE-2022-32199

Exploit
  • EPSS 7.08%
  • Veröffentlicht 27.03.2023 06:15:07
  • Zuletzt bearbeitet 19.02.2025 21:15:10

db_convert.php in ScriptCase through 9.9.008 is vulnerable to Arbitrary File Deletion by an admin via a directory traversal sequence in the file parameter.