Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

12 records

Vendor: Scriptcase Clear all filters
TI-2025-29792 CVE-2025-47228 · GHSA-pfxq-29cx-gm9c

OS command injection in ScriptCase

Priority HIGH 65

In the Production Environment extension in Netmake ScriptCase through 9.12.006 (23), shell injection in the SSH connection settings allows authenticated attackers to execute system commands via crafted HTTP requests.

CVSS 3.1MEDIUM 6.7 Network High privileges No interaction EPSS 0.23081 Published 2025-07-05 No fix listed CWE-78
TI-2024-08302 CVE-2024-8942 · GHSA-xpx9-f724-2jfc

Cross-site Scripting vulnerability on Scriptcase

Priority LOW 36

Vulnerability in Scriptcase version 9.4.019 that consists of a Cross-Site Scripting (XSS), due to the lack of input validation, affecting the “id_form_msg_title” parameter, among others.

CVSS 3.1HIGH 8.2 Network No auth User interaction EPSS 0.00348 Published 2024-09-24 No fix listed CWE-79
TI-2024-08301 CVE-2024-8941 · GHSA-3hc5-r53w-6ph8

Path Traversal vulnerability on Scriptcase

Priority MEDIUM 40

Path traversal vulnerability in Scriptcase version 9.4.019, in /scriptcase/devel/compat/nm_edit_php_edit.php (in the “subpage” parameter), which allows unauthenticated remote users to bypass SecurityManager's intended re…

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00604 Published 2024-09-24 No fix listed CWE-22
TI-2024-08300 CVE-2024-8940 · GHSA-r44h-cw52-2x2f

Unrestricted Upload of File with Dangerous Type vulnerability on Scriptcase

Priority MEDIUM 50

Vulnerability in the Scriptcase application version 9.4.019, which involves the arbitrary upload of a file via /scriptcase/devel/lib/third/jquery_plugin/jQuery-File-Upload/server/php/ via a POST request.

CVSS 3.1CRITICAL 10.0 Network No auth No interaction EPSS 0.00546 Published 2024-09-24 No fix listed CWE-434