Scriptcase

12 CVEs across 1 Scriptcase products. Browse Scriptcase vulnerabilities, severities, and proof-of-concept exploits.

Scriptcase products with known CVEs

Product	CVEs
Scriptcase	12

Scriptcase CVEs — newest first
CVE	Severity	Score	Published	Summary
`CVE-2025-47228`	Medium	`6.7`	2025-07-05	In the Production Environment extension in Netmake ScriptCase through 9.12.006 (23), shell injection in the SSH connection settings allows authenticated attack…
`CVE-2025-47227`	High	`7.5`	2025-07-05	In the Production Environment extension in Netmake ScriptCase through 9.12.006 (23), the Administrator password reset mechanism is mishandled. Making both a GE…
`CVE-2024-46084`	High	`8.0`	2024-10-01	Scriptcase 9.10.023 and before is vulnerable to Remote Code Execution (RCE) via the nm_unzip function.
`CVE-2024-46082`	Medium	`5.4`	2024-10-01	Scriptcase v.9.10.023 and before is vulnerable to Cross Site Scripting (XSS) in nm_cor.php via the form and field parameters.
`CVE-2024-46080`	High	`8.0`	2024-10-01	Scriptcase v9.10.023 and before is vulnerable to Remote Code Execution (RCE) via the nm_zip function.
`CVE-2024-46083`	Medium	`5.4`	2024-10-01	Scriptcase v9.10.023 and before is vulnerable to Cross Site Scripting (XSS). An authenticated user can craft malicious payloads using the messages feature, whi…
`CVE-2024-46081`	Medium	`5.4`	2024-10-01	Scriptcase v9.10.023 and before is vulnerable to Cross Site Scripting (XSS). An authenticated user can craft malicious payloads in the To-Do List. The assigned…
`CVE-2024-46079`	Medium	`6.1`	2024-10-01	Scriptcase v9.10.023 and before is vulnerable to Cross Site Scripting (XSS) in proj_new.php via the Descricao parameter.
`CVE-2024-8942`	Medium	`6.3`	2024-09-25	Vulnerability in Scriptcase version 9.4.019 that consists of a Cross-Site Scripting (XSS), due to the lack of input validation, affecting the “id_form_msg_titl…
`CVE-2024-8941`	High	`7.5`	2024-09-25	Path traversal vulnerability in Scriptcase version 9.4.019, in /scriptcase/devel/compat/nm_edit_php_edit.php (in the “subpage” parameter), which allows unauthe…
`CVE-2024-8940`	Critical	`10.0`	2024-09-25	Vulnerability in the Scriptcase application version 9.4.019, which involves the arbitrary upload of a file via /scriptcase/devel/lib/third/jquery_plugin/jQuery…
`CVE-2022-32199`	Medium	`6.5`	2023-03-27	db_convert.php in ScriptCase through 9.9.008 is vulnerable to Arbitrary File Deletion by an admin via a directory traversal sequence in the file parameter.