ScriptCase vulnerabilities
We track 3 vulnerabilities in ScriptCase products. 3 are rated high or critical, and none are known to be exploited. The most recent was published on July 5, 2025.
Latest ScriptCase vulnerabilities
- 7.5 High severity
ScriptCase: Incorrect Provision of Specified Functionality
In the Production Environment extension in Netmake ScriptCase through 9.12.006 (23), the Administrator password reset mechanism is mishandled. Making both a GET and a POST request to login.php.is sufficient. An unauthenticated attacker can then bypass authenti
- 8.2 High severity
Scriptcase: Improper Neutralization of Input During Web Page Generation
Vulnerability in Scriptcase version 9.4.019 that consists of a Cross-Site Scripting (XSS), due to the lack of input validation, affecting the “id_form_msg_title” parameter, among others. This vulnerability could allow a remote user to send a specially crafted
- 9.8 Critical severity
Scriptcase: Unrestricted Upload of File with Dangerous Type
Vulnerability in the Scriptcase application version 9.4.019, which involves the arbitrary upload of a file via /scriptcase/devel/lib/third/jquery_plugin/jQuery-File-Upload/server/php/ via a POST request. An attacker could upload malicious files to the server d