CVE-2024-46080

概要

参考情報

• blog.hawktesters.com/zero-day-alert-scriptcase-vulnerabilities-rce · Exploit

scriptcase のその他の脆弱性

• CVE-2024-46084高 8.0Scriptcase 9.10.023 and before is vulnerable to Remote Code Execution (RCE) via the nm_unzip function.
• CVE-2024-46082中 5.4Scriptcase v.9.10.023 and before is vulnerable to Cross Site Scripting (XSS) in nm_cor.php via the form and field parameters.
• CVE-2024-46083中 5.4Scriptcase v9.10.023 and before is vulnerable to Cross Site Scripting (XSS). An authenticated user can craft malicious payloads using the me…
• CVE-2024-46081中 5.4Scriptcase v9.10.023 and before is vulnerable to Cross Site Scripting (XSS). An authenticated user can craft malicious payloads in the To-Do…
• CVE-2024-46079中 6.1Scriptcase v9.10.023 and before is vulnerable to Cross Site Scripting (XSS) in proj_new.php via the Descricao parameter.