CVE-2024-46084

Scriptcase versions 9.10.023 and before are vulnerable to Remote Code Execution (RCE) due to an issue in the nm_unzip function. This vulnerability allows an attacker to execute arbitrary code remotely, potentially leading to unauthorized access and full system control. As of the latest records, n...

CVE-2024-46079: Improper Neutralization of Input During Web Page Generation

Scriptcase v9.10.023 and before is vulnerable to Cross Site Scripting XSS in projnew.php via the Descricao parameter...

CVE-2024-46083: Improper Neutralization of Input During Web Page Generation

Scriptcase v9.10.023 and before is vulnerable to Cross Site Scripting XSS. An authenticated user can craft malicious payloads using the messages feature, which allows the injection of malicious code into any user's account on the platform. It is important to note that regular users can trigger...

Scriptcase 安全漏洞

Scriptcase is a low-code platform for rapid application development from Scriptcase, Inc. A security vulnerability exists in Scriptcase v9.10.023 and prior versions that stems from vulnerability to cross-site scripting XSS attacks, where an authenticated user can craft a malicious payload using t...

CVE-2024-46079

The low-code development platform Scriptcase is vulnerable to Cross-Site Scripting (XSS) in versions v9.10.023 and before . The flaw exists in the proj_new.php file and is triggered via the Descricao parameter. Exploitation of this vulnerability allows for the execution of malicious scripts in a ...

CVE-2024-46080

Scriptcase v9.10.023 and before is vulnerable to Remote Code Execution RCE via the nmzip function...

CVE-2024-46080

Scriptcase versions v9.10.023 and earlier are vulnerable to Remote Code Execution (RCE) due to a flaw in the nm_zip function. This vulnerability potentially allows an attacker to gain unauthorized access and control over the affected system. As a temporary workaround, it is recommended to disable...

CVE-2024-46079

Scriptcase v9.10.023 and before is vulnerable to Cross Site Scripting XSS in projnew.php via the Descricao parameter...

PT-2024-31901 · Unknown · Scriptcase

Name of the Vulnerable Software and Affected Versions: Scriptcase versions 9.10.023 and earlier Description: The issue allows an authenticated user to craft malicious payloads in the To-Do List, triggering a stored Cross Site Scripting XSS attack when the assigned user interacts with the task. Th...

CVE-2024-46082

Scriptcase v.9.10.023 and before is vulnerable to Cross Site Scripting XSS in nmcor.php via the form and field parameters...

PT-2024-31904 · Unknown · Scriptcase

Name of the Vulnerable Software and Affected Versions: Scriptcase versions 9.10.023 and earlier Description: The issue is a Remote Code Execution RCE vulnerability via the nm unzip function. This allows for remote code execution, potentially leading to unauthorized access and control of the syste...

PT-2024-31903 · Unknown · Scriptcase

Name of the Vulnerable Software and Affected Versions: Scriptcase versions 9.10.023 and earlier Description: The issue allows an authenticated user to craft malicious payloads using the messages feature, enabling the injection of malicious code into any user's account on the platform. Regular use...

CVE-2024-46081

Scriptcase versions 9.10.023 and earlier are vulnerable to a Stored Cross-Site Scripting (XSS) flaw. An authenticated user can craft malicious payloads within the To-Do List component. When a task containing this payload is assigned to and subsequently interacted with by another user, the stored ...

Scriptcase 安全漏洞

Scriptcase is a low-code platform for rapid application development from Scriptcase, Inc. A security vulnerability exists in Scriptcase v9.10.023 and earlier versions that stems from vulnerability to cross-site scripting XSS attacks...

CVE-2024-46083

Scriptcase v9.10.023 and before is vulnerable to Cross Site Scripting XSS. An authenticated user can craft malicious payloads using the messages feature, which allows the injection of malicious code into any user's account on the platform. It is important to note that regular users can trigger...

CVE-2024-46081

Scriptcase v9.10.023 and before is vulnerable to Cross Site Scripting XSS. An authenticated user can craft malicious payloads in the To-Do List. The assigned user will trigger a stored XSS, which is particularly dangerous because tasks are assigned to various users on the platform...

CVE-2024-46081

Scriptcase v9.10.023 and before is vulnerable to Cross Site Scripting XSS. An authenticated user can craft malicious payloads in the To-Do List. The assigned user will trigger a stored XSS, which is particularly dangerous because tasks are assigned to various users on the platform...

Scriptcase 安全漏洞

Scriptcase is a low-code platform for rapid application development from Scriptcase, Inc. A security vulnerability exists in Scriptcase v9.10.023 and earlier versions that stems from vulnerability to cross-site scripting XSS attacks...

CVE-2024-46081: Improper Neutralization of Input During Web Page Generation

Scriptcase v9.10.023 and before is vulnerable to Cross Site Scripting XSS. An authenticated user can craft malicious payloads in the To-Do List. The assigned user will trigger a stored XSS, which is particularly dangerous because tasks are assigned to various users on the platform...

CVE-2024-46082

Scriptcase versions 9.10.023 and earlier are vulnerable to Cross Site Scripting (XSS) . The flaw exists in the nm_cor.php file, where the application fails to properly neutralize input through the form and field parameters. This allows for potential malicious script injection. As a temporary work...