Scriptcase

Records12All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical1CVSS 9.0–10.0

CVSS high5CVSS 7.0–8.9

Exploited now

Scriptcase records in CISA KEV

No Scriptcase vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Scriptcase 10 records HIGH

Records

12 records

TI-2025-29791 CVE-2025-47227 · GHSA-276w-gj4p-9x23

In the Production Environment extension in Netmake ScriptCase through 9.12.006 (23), the…

HIGH 72

In the Production Environment extension in Netmake ScriptCase through 9.12.006 (23), the Administrator password reset mechanism is mishandled.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.01923 Published 2025-07-05 No fix listed CWE-684

TI-2024-30887 CVE-2024-46084 · GHSA-7cj2-6wfj-9p3m

Scriptcase 9.10.023 and before is vulnerable to Remote Code Execution (RCE) via the nm_unzip function.

HIGH 70

Scriptcase 9.10.023 and before is vulnerable to Remote Code Execution (RCE) via the nm_unzip function.

CVSS 3.1HIGH 8.0 Network Low privileges User interaction EPSS 0.00797 Published 2024-10-01 No fix listed CWE-77

TI-2024-30883 CVE-2024-46080 · GHSA-7m36-cp6h-v658

Scriptcase v9.10.023 and before is vulnerable to Remote Code Execution (RCE) via the nm_zip function.

HIGH 70

Scriptcase v9.10.023 and before is vulnerable to Remote Code Execution (RCE) via the nm_zip function.

CVSS 3.1HIGH 8.0 Network Low privileges User interaction EPSS 0.00797 Published 2024-10-01 No fix listed CWE-94

TI-2025-29792 CVE-2025-47228 · GHSA-pfxq-29cx-gm9c

OS command injection in ScriptCase

HIGH 65

In the Production Environment extension in Netmake ScriptCase through 9.12.006 (23), shell injection in the SSH connection settings allows authenticated attackers to execute system commands via crafted HTTP requests.

CVSS 3.1MEDIUM 6.7 Network High privileges No interaction EPSS 0.23081 Published 2025-07-05 No fix listed CWE-78

TI-2024-30882 CVE-2024-46079 · GHSA-rmm7-6q86-gphj

Scriptcase v9.10.023 and before is vulnerable to Cross Site Scripting (XSS) in proj_new.php via the Descricao parameter.

MEDIUM 60

Scriptcase v9.10.023 and before is vulnerable to Cross Site Scripting (XSS) in proj_new.php via the Descricao parameter.

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.00347 Published 2024-10-01 No fix listed CWE-79

TI-2024-30886 CVE-2024-46083 · GHSA-9gjr-hc3c-4w38

Scriptcase v9.10.023 and before is vulnerable to Cross Site Scripting (XSS).

MEDIUM 58

Scriptcase v9.10.023 and before is vulnerable to Cross Site Scripting (XSS).

CVSS 3.1MEDIUM 5.4 Network Low privileges User interaction EPSS 0.00294 Published 2024-10-01 No fix listed CWE-79

TI-2024-30885 CVE-2024-46082 · GHSA-34fm-4fgc-9w37

Scriptcase v.9.10.023 and before is vulnerable to Cross Site Scripting (XSS) in…

MEDIUM 58

Scriptcase v.9.10.023 and before is vulnerable to Cross Site Scripting (XSS) in nm_cor.php via the form and field parameters.

CVSS 3.1MEDIUM 5.4 Network Low privileges User interaction EPSS 0.00316 Published 2024-10-01 No fix listed CWE-79

TI-2024-30884 CVE-2024-46081 · GHSA-h4hg-6856-qv2j

Scriptcase v9.10.023 and before is vulnerable to Cross Site Scripting (XSS).

MEDIUM 58

Scriptcase v9.10.023 and before is vulnerable to Cross Site Scripting (XSS).

CVSS 3.1MEDIUM 5.4 Network Low privileges User interaction EPSS 0.00323 Published 2024-10-01 No fix listed CWE-79

TI-2024-08300 CVE-2024-8940 · GHSA-r44h-cw52-2x2f

Unrestricted Upload of File with Dangerous Type vulnerability on Scriptcase

MEDIUM 50

Vulnerability in the Scriptcase application version 9.4.019, which involves the arbitrary upload of a file via /scriptcase/devel/lib/third/jquery_plugin/jQuery-File-Upload/server/php/ via a POST request.

CVSS 3.1CRITICAL 10.0 Network No auth No interaction EPSS 0.00546 Published 2024-09-24 No fix listed CWE-434

TI-2024-08301 CVE-2024-8941 · GHSA-3hc5-r53w-6ph8

Path Traversal vulnerability on Scriptcase

MEDIUM 40

Path traversal vulnerability in Scriptcase version 9.4.019, in /scriptcase/devel/compat/nm_edit_php_edit.php (in the “subpage” parameter), which allows unauthenticated remote users to bypass SecurityManager's intended re…

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00604 Published 2024-09-24 No fix listed CWE-22

TI-2024-08302 CVE-2024-8942 · GHSA-xpx9-f724-2jfc

Cross-site Scripting vulnerability on Scriptcase

LOW 36

Vulnerability in Scriptcase version 9.4.019 that consists of a Cross-Site Scripting (XSS), due to the lack of input validation, affecting the “id_form_msg_title” parameter, among others.

CVSS 3.1HIGH 8.2 Network No auth User interaction EPSS 0.00348 Published 2024-09-24 No fix listed CWE-79

TI-2022-13909 CVE-2022-32199 · GHSA-qcgm-v3pw-fqx8

db_convert.php in ScriptCase through 9.9.008 is vulnerable to Arbitrary File Deletion by…

LOW 32

db_convert.php in ScriptCase through 9.9.008 is vulnerable to Arbitrary File Deletion by an admin via a directory traversal sequence in the file parameter.

CVSS 3.1MEDIUM 6.5 Network High privileges No interaction EPSS 0.01664 Published 2023-03-27 No fix listed CWE-22

Open these records in search →

Critical	1
High	5
Medium	6
Low	0
No CVSS	0