CVE-2024-8941

creationtimestamp| type| source ---|---|--- 2024-09-25 04:16:35+00:00| seen| https://t.me/cvedetector/6247...

CVE-2024-8941 Path Traversal vulnerability on Scriptcase

Path traversal vulnerability in Scriptcase version 9.4.019, in /scriptcase/devel/compat/nmeditphpedit.php in the “subpage” parameter, which allows unauthenticated remote users to bypass SecurityManager's intended restrictions and list and/or read a parent directory via a “/...” or directly into a...

CVE-2024-8941

CVE-2024-8941 affects Scriptcase v9.4.019. A path traversal flaw exists in /scriptcase/devel/compat/nm_edit_php_edit.php via the subpage parameter (and the POST field_file) that can allow unauthenticated remote users to bypass SecurityManager and list/read a parent directory. Impact stated in sou...