ScriptCase 9.12.006 (23) - Remote Command Execution (RCE)

Exploit Title: ScriptCase 9.12.006 23 - Remote Command Execution RCE Date: 04/07/2025 Exploit Author: Alexandre ZANNI noraj & Alexandre DROULLÉ cabir Vendor Homepage: https://www.scriptcase.net/ Software Link: https://www.scriptcase.net/download/ Version: 1.0.003-build-2 Production Environment /...

CVE-2025-47228

In the Production Environment extension in Netmake ScriptCase through 9.12.006 23, shell injection in the SSH connection settings allows authenticated attackers to execute system commands via crafted HTTP requests...

CVE-2025-47228

creationtimestamp| type| source ---|---|--- 2025-07-05 05:25:25+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lt6zfboqjr2a 2025-07-09 21:02:25+00:00| seen| https://bsky.app/profile/beikokucyber.bsky.social/post/3ltkpmbp74e2w 2025-08-06 01:04:20+00:00| seen|...