CVE-2025-47227: Scriptcase

High severity, CVSS 7.5. EPSS: 1.9% chance of exploitation in the next 30 days.

In the Production Environment extension in Netmake ScriptCase through 9.12.006 (23), the Administrator password reset mechanism is mishandled. Making both a GET and a POST request to login.php.is sufficient. An unauthenticated attacker can then bypass authentication via administrator account takeover.

Affected products

• Scriptcase Scriptcase: up to and including 9.12.006 (23)

Published 2025-07-05. Last modified 2026-06-17.