CVE-2024-46084

Description

References

• blog.hawktesters.com/zero-day-alert-scriptcase-vulnerabilities-rce · Exploit

Mais vulnerabilidades de scriptcase

• CVE-2024-46082MÉDIO 5.4Scriptcase v.9.10.023 and before is vulnerable to Cross Site Scripting (XSS) in nm_cor.php via the form and field parameters.
• CVE-2024-46080ALTO 8.0Scriptcase v9.10.023 and before is vulnerable to Remote Code Execution (RCE) via the nm_zip function.
• CVE-2024-46083MÉDIO 5.4Scriptcase v9.10.023 and before is vulnerable to Cross Site Scripting (XSS). An authenticated user can craft malicious payloads using the me…
• CVE-2024-46081MÉDIO 5.4Scriptcase v9.10.023 and before is vulnerable to Cross Site Scripting (XSS). An authenticated user can craft malicious payloads in the To-Do…
• CVE-2024-46079MÉDIO 6.1Scriptcase v9.10.023 and before is vulnerable to Cross Site Scripting (XSS) in proj_new.php via the Descricao parameter.