CVE-2024-46082

概要

参考情報

• blog.hawktesters.com/zero-day-alert-scriptcase-vulnerabilities-rce · Exploit
• blog.hawktesters.com/zero-day-alert-scriptcase-vulnerabilities-xss · Exploit

scriptcase のその他の脆弱性

• CVE-2024-46084高 8.0Scriptcase 9.10.023 and before is vulnerable to Remote Code Execution (RCE) via the nm_unzip function.
• CVE-2024-46080高 8.0Scriptcase v9.10.023 and before is vulnerable to Remote Code Execution (RCE) via the nm_zip function.
• CVE-2024-46083中 5.4Scriptcase v9.10.023 and before is vulnerable to Cross Site Scripting (XSS). An authenticated user can craft malicious payloads using the me…
• CVE-2024-46081中 5.4Scriptcase v9.10.023 and before is vulnerable to Cross Site Scripting (XSS). An authenticated user can craft malicious payloads in the To-Do…
• CVE-2024-46079中 6.1Scriptcase v9.10.023 and before is vulnerable to Cross Site Scripting (XSS) in proj_new.php via the Descricao parameter.