Lucene search
HistorySep 30, 2022 - 7:15 p.m.
CVE-2022-35155
cve-2022-35155
bus pass management system
xss vulnerability
nvd
reflected xss
searchdata parameter
6.1 Medium
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
REQUIRED
Scope
CHANGED
Confidentiality Impact
LOW
Integrity Impact
LOW
Availability Impact
NONE
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
0.001 Low
EPSS
Percentile
37.4%
Bus Pass Management System v1.0 was discovered to contain a reflected cross-site scripting (XSS) vulnerability via the searchdata parameter.
Affected configurations
Node
phpgurukulbus_pass_management_systemMatch1.0
| CPE | Name | Operator | Version |
|---|---|---|---|
| phpgurukul:bus_pass_management_system | phpgurukul bus pass management system | eq | 1.0 |
References
Social References
More
Related
prion
prion
Cross site scripting
2022-09-30 19:15:00
cvelist
cvelist
CVE-2022-35155
2022-09-30 18:10:11
nvd
nvd
CVE-2022-35155
2022-09-30 19:15:15
exploitdb
exploitdb
Bus Pass Management System 1.0 - Cross-Site Scripting (XSS)
2023-03-25 00:00:00
6.1 Medium
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
REQUIRED
Scope
CHANGED
Confidentiality Impact
LOW
Integrity Impact
LOW
Availability Impact
NONE
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
0.001 Low
EPSS
Percentile
37.4%
Related for CVE-2022-35155