ScriptCase

Every one of the 12 is a mark on the map. Named now: 1 to 12, most at risk first.

1. In the Production Environment extension in Netmake ScriptCase through 9.12.006 (23), shell injection in the SSH connection settings allows authenticated attackers to execute syste…CVE-2025-47228ScriptCase · CVSS 6.7 · 23% likely

   CWE-78

2. In the Production Environment extension in Netmake ScriptCase through 9.12.006 (23), the Administrator password reset mechanism is mishandled. Making both a GET and a POST request…CVE-2025-47227ScriptCase · CVSS 7.5 · 1.9% likely

   CWE-684

3. db_convert.php in ScriptCase through 9.9.008 is vulnerable to Arbitrary File Deletion by an admin via a directory traversal sequence in the file parameter.CVE-2022-32199Scriptcase · CVSS 6.5 · 1.7% likely

   CWE-22

4. Scriptcase 9.10.023 and before is vulnerable to Remote Code Execution (RCE) via the nm_unzip function.CVE-2024-46084Scriptcase · CVSS 8 · 0.8% likely

   CWE-77

5. Scriptcase v9.10.023 and before is vulnerable to Remote Code Execution (RCE) via the nm_zip function.CVE-2024-46080Scriptcase · CVSS 8 · 0.8% likely

   CWE-94

6. Path Traversal vulnerability on ScriptcaseCVE-2024-8941Scriptcase · CVSS 7.5 · 0.6% likely

   CWE-22

7. Unrestricted Upload of File with Dangerous Type vulnerability on ScriptcaseCVE-2024-8940Scriptcase · CVSS 10 · 0.5% likely

   CWE-434

8. Cross-site Scripting vulnerability on ScriptcaseCVE-2024-8942Scriptcase · CVSS 6.3 · 0.3% likely

   CWE-79

9. Scriptcase v9.10.023 and before is vulnerable to Cross Site Scripting (XSS) in proj_new.php via the Descricao parameter.CVE-2024-46079Scriptcase · CVSS 6.1 · 0.3% likely

   CWE-79

10. Scriptcase v9.10.023 and before is vulnerable to Cross Site Scripting (XSS). An authenticated user can craft malicious payloads in the To-Do List. The assigned user will trigger a…CVE-2024-46081Scriptcase · CVSS 5.4 · 0.3% likely

    CWE-79

11. Scriptcase v.9.10.023 and before is vulnerable to Cross Site Scripting (XSS) in nm_cor.php via the form and field parameters.CVE-2024-46082Scriptcase · CVSS 5.4 · 0.3% likely

    CWE-79

12. Scriptcase v9.10.023 and before is vulnerable to Cross Site Scripting (XSS). An authenticated user can craft malicious payloads using the messages feature, which allows the inject…CVE-2024-46083Scriptcase · CVSS 5.4 · 0.3% likely

    CWE-79

exploited in the wildcheck availableringed, named or not: CyberSIXT has reported on it

Zoom in on the map and the dots under the middle of it are named where they are.