CVE-2022-32199

MediumCVSS 6.5/10Last modified Jun 17, 2026

Description

db_convert.php in ScriptCase through 9.9.008 is vulnerable to Arbitrary File Deletion by an admin via a directory traversal sequence in the file parameter.

Metrics

CVSS 3.1 6.5/10CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:H/A:H

Weakness enumeration

CWE-22

Affected software

Vendor	Product	Versions
n/a	n/a	n/a

References

https://github.com/Toxich4/CVE-2022-32199Exploit, Third Party Advisory
https://www.scriptcase.net/download/Product
https://github.com/Toxich4/CVE-2022-32199Exploit, Third Party Advisory
https://www.scriptcase.net/download/Product

Timeline

Published: Mar 27, 2023
Last modified: Jun 17, 2026
NVD status: Modified

Related CVEs from 2022

CVE-2022-32204.8The Advanced Comment Form WordPress plugin before 1.2.1 does not sanitise and escape its settings, allowing high privilege users such as adm CVE-2022-322007.8libdwarf 0.4.0 has a heap-based buffer over-read in _dwarf_check_string_valid in dwarf_util.c.CVE-2022-322015.5In libjpeg 1.63, there is a NULL pointer dereference in Component::SubXOf in component.hpp.CVE-2022-322025.5In libjpeg 1.63, there is a NULL pointer dereference in LineBuffer::FetchRegion in linebuffer.cpp.CVE-2022-322039.8There is a command injection vulnerability in Huawei terminal printer product. Successful exploitation could result in the highest privilege CVE-2022-322047.5There is an improper input verification vulnerability in Huawei printer product. Successful exploitation of this vulnerability may cause ser CVE-2022-322054.3A malicious server can serve excessive amounts of `Set-Cookie:` headers in a HTTP response to curl and curl < 7.84.0 stores all of them. A s CVE-2022-322066.5curl < 7.84.0 supports "chained" HTTP compression algorithms, meaning that a serverresponse can be compressed multiple times and potentially CVE-2022-322079.8When curl < 7.84.0 saves cookies, alt-svc and hsts data to local files, it makes the operation atomic by finalizing the operation with a ren CVE-2022-322085.9When curl < 7.84.0 does FTP transfers secured by krb5, it handles message verification failures wrongly. This flaw makes it possible for a M CVE-2022-322096.1# Possible XSS Vulnerability in Rails::Html::SanitizerThere is a possible XSS vulnerability with certain configurations of Rails::Html::Sani CVE-2022-32218.8Cross-Site Request Forgery (CSRF) in GitHub repository ikus060/rdiffweb prior to 2.4.3.