Scriptcase 9.4.019
Approved changes feed: RSS · Atom
cpe:2.3:a:scriptcase:scriptcase:9.4.019:*:*:*:*:*:*:*part: a version: 9.4.019 update: *
| Vendor | Scriptcase (13678284-3630-5699-a4c1-3a3ce98c44c4) |
|---|---|
| Product | Scriptcase (d906018b-5bfa-5e68-8850-647c4b99d2d2) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
Notes
Imported from NVD CPE 2.0 feed
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2024-8942 |
vulnerable | 2026-06-08 07:00:26.172167 |
Cross-site Scripting vulnerability on Scriptcase
MEDIUM (6.3)
Vulnerability in Scriptcase version 9.4.019 that consists of a Cross-Site Scripting (XSS), due to the lack of input validation, affecting the “id_form_msg_title” parameter, among others. This vulnerability could allow a remote user to send a specially crafted URL to a victim and retrieve their credentials.
Published: 2024-09-24T11:51:49.722Z
Updated: 2024-09-24T13:26:07.233Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-8941 |
vulnerable | 2026-06-08 07:00:26.171353 |
Path Traversal vulnerability on Scriptcase
HIGH (7.5)
Path traversal vulnerability in Scriptcase version 9.4.019, in /scriptcase/devel/compat/nm_edit_php_edit.php (in the “subpage” parameter), which allows unauthenticated remote users to bypass SecurityManager's intended restrictions and list and/or read a parent directory via a “/...” or directly into a path used in the POST parameter “field_file” by a web application.
Published: 2024-09-24T11:50:58.074Z
Updated: 2024-09-24T13:27:40.219Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-8940 |
vulnerable | 2026-06-08 07:00:26.169691 |
Unrestricted Upload of File with Dangerous Type vulnerability on Scriptcase
CRITICAL (10)
Vulnerability in the Scriptcase application version 9.4.019, which involves the arbitrary upload of a file via /scriptcase/devel/lib/third/jquery_plugin/jQuery-File-Upload/server/php/ via a POST request. An attacker could upload malicious files to the server due to the application not properly verifying user input.
Published: 2024-09-24T11:48:36.160Z
Updated: 2024-09-24T13:28:36.727Z |
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.
Inspect record JSON
Open this panel to browse, search, copy or download the JSON record.