Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
2 selected

10 records

Vendor: Scriptcase Component: Scriptcase Clear all filters
TI-2024-08302 CVE-2024-8942 · GHSA-xpx9-f724-2jfc

Cross-site Scripting vulnerability on Scriptcase

Priority LOW 36

Vulnerability in Scriptcase version 9.4.019 that consists of a Cross-Site Scripting (XSS), due to the lack of input validation, affecting the “id_form_msg_title” parameter, among others.

CVSS 3.1HIGH 8.2 Network No auth User interaction EPSS 0.00348 Published 2024-09-24 No fix listed CWE-79
TI-2024-08301 CVE-2024-8941 · GHSA-3hc5-r53w-6ph8

Path Traversal vulnerability on Scriptcase

Priority MEDIUM 40

Path traversal vulnerability in Scriptcase version 9.4.019, in /scriptcase/devel/compat/nm_edit_php_edit.php (in the “subpage” parameter), which allows unauthenticated remote users to bypass SecurityManager's intended re…

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00604 Published 2024-09-24 No fix listed CWE-22
TI-2024-08300 CVE-2024-8940 · GHSA-r44h-cw52-2x2f

Unrestricted Upload of File with Dangerous Type vulnerability on Scriptcase

Priority MEDIUM 50

Vulnerability in the Scriptcase application version 9.4.019, which involves the arbitrary upload of a file via /scriptcase/devel/lib/third/jquery_plugin/jQuery-File-Upload/server/php/ via a POST request.

CVSS 3.1CRITICAL 10.0 Network No auth No interaction EPSS 0.00546 Published 2024-09-24 No fix listed CWE-434