Cross site scripting

2023-07-2814:15:00

PRIOn knowledge base

www.prio-n.com

cross site scripting

rail pass management

remote attacker

sensitive information

admin-profile.php

nvd

4.9 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

28.2%

JSON

Cross Site Scripting vulnerability found in Rail Pass Management System v.1.0 allows a remote attacker to obtain sensitive information via the emial parameter of admin-profile.php.

CPENameOperatorVersion
rail_pass_management_systemeq1.0

CPE	Name	Operator	Version
	rail_pass_management_system	eq	1.0

References

github.com/DiliLearngent/BugReport/blob/main/php/Rail-Pass-Management-System/bug1-XSS-in-Admin-Name.md

github.com/DiliLearngent/BugReport/blob/main/php/Rail-Pass-Management-System/bug2-XSS-in-Email-address.md