CVE-2024-46079

Scriptcase v9.10.023 and before is vulnerable to Cross Site Scripting XSS in projnew.php via the Descricao parameter...

CVE-2024-46081

Scriptcase v9.10.023 and before is vulnerable to Cross Site Scripting XSS. An authenticated user can craft malicious payloads in the To-Do List. The assigned user will trigger a stored XSS, which is particularly dangerous because tasks are assigned to various users on the platform...

CVE-2024-46079

Scriptcase v9.10.023 and before is vulnerable to Cross Site Scripting XSS in projnew.php via the Descricao parameter...

CVE-2024-46084

Scriptcase 9.10.023 and before is vulnerable to Remote Code Execution RCE via the nmunzip function...

CVE-2024-46080

Scriptcase v9.10.023 and before is vulnerable to Remote Code Execution RCE via the nmzip function...

PT-2024-31900 · Unknown · Scriptcase

Name of the Vulnerable Software and Affected Versions: Scriptcase versions 9.10.023 and earlier Description: The issue is a Remote Code Execution RCE vulnerability caused by the nm zip function. This allows for remote code execution, potentially leading to unauthorized access and control of the...

Scriptcase 安全漏洞

Scriptcase is a low-code platform for rapid application development from Scriptcase, Inc. A security vulnerability exists in Scriptcase v9.10.023 and earlier versions, which stems from the pass being susceptible to Remote Code Execution RCE attacks...

CVE-2024-46083

Scriptcase v9.10.023 and before is vulnerable to Cross Site Scripting XSS. An authenticated user can craft malicious payloads using the messages feature, which allows the injection of malicious code into any user's account on the platform. It is important to note that regular users can trigger...

CVE-2024-46080

Scriptcase versions v9.10.023 and earlier are vulnerable to Remote Code Execution (RCE) due to a flaw in the nm_zip function. This vulnerability could allow an attacker to execute arbitrary code, potentially leading to unauthorized system access and control. As a temporary workaround, it is recom...

CVE-2024-46079

Scriptcase version v9.10.023 and earlier is vulnerable to a Cross-Site Scripting (XSS) flaw. The vulnerability exists in the proj_new.php file when the application fails to properly neutralize input provided via the Descricao parameter. This could allow an attacker to execute malicious scripts in...

CVE-2024-46079

Scriptcase v9.10.023 and before is vulnerable to Cross Site Scripting XSS in projnew.php via the Descricao parameter...

CVE-2024-46079

Scriptcase v9.10.023 and before is vulnerable to Cross Site Scripting XSS in projnew.php via the Descricao parameter...

Scriptcase 安全漏洞

Scriptcase is a low-code platform for rapid application development from Scriptcase, Inc. A security vulnerability exists in Scriptcase version 9.10.023 and earlier that stems from vulnerability to remote code execution RCE attacks...

Scriptcase 安全漏洞

Scriptcase is a low-code platform for rapid application development from Scriptcase, Inc. A security vulnerability exists in Scriptcase v9.10.023 and prior versions that stems from vulnerability to cross-site scripting XSS attacks, where an authenticated user can craft a malicious payload using t...

CVE-2024-46084

Scriptcase 9.10.023 and before is vulnerable to Remote Code Execution RCE via the nmunzip function...

CVE-2024-46082

Scriptcase v.9.10.023 and before is vulnerable to Cross Site Scripting XSS in nmcor.php via the form and field parameters...

PT-2024-31902 · Unknown · Scriptcase

Name of the Vulnerable Software and Affected Versions: Scriptcase versions 9.10.023 and earlier Description: The issue is related to Cross Site Scripting XSS in the nm cor.php file, specifically via the form and field parameters. This allows for potential malicious script injection...

CVE-2024-46080

Scriptcase v9.10.023 and before is vulnerable to Remote Code Execution RCE via the nmzip function...

CVE-2024-46084

Scriptcase versions 9.10.023 and earlier are vulnerable to Remote Code Execution (RCE) . The root cause lies in the nm_unzip function, which could allow an attacker to achieve unauthorized access and control of the system. As a temporary workaround, it is recommended to disable the nm_unzip funct...

CVE-2024-46083

Scriptcase v9.10.023 and before is vulnerable to Cross Site Scripting XSS. An authenticated user can craft malicious payloads using the messages feature, which allows the injection of malicious code into any user's account on the platform. It is important to note that regular users can trigger...