Lucene search
+L

6 matches found

OSV
OSV
•added 2022/10/27 12:15 p.m.•18 views

CVE-2022-42992

Multiple stored cross-site scripting XSS vulnerabilities in Train Scheduler App v1.0 allow attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the Train Code, Train Name, and Destination text fields...

5.4CVSS5.9AI score0.00489EPSS
SaveExploits1References3
attackerkb
attackerkb
•added 2022/10/27 12:15 p.m.•11 views

CVE-2022-42992

Multiple stored cross-site scripting XSS vulnerabilities in Train Scheduler App v1.0 allow attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the Train Code, Train Name, and Destination text fields...

5.4CVSS6.2AI score0.00489EPSS
SaveExploits1References4
Prion
Prion
•added 2022/10/27 12:15 p.m.•23 views

Cross site scripting

Multiple stored cross-site scripting XSS vulnerabilities in Train Scheduler App v1.0 allow attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the Train Code, Train Name, and Destination text fields...

4.9CVSS5.3AI score0.00489EPSS
SaveExploits1References3Affected Software1
Cvelist
Cvelist
•added 2022/10/27 12:00 a.m.•51 views

CVE-2022-42992

Multiple stored cross-site scripting XSS vulnerabilities in Train Scheduler App v1.0 allow attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the Train Code, Train Name, and Destination text fields...

5.6AI score0.00489EPSS
SaveExploits1References1
Positive Technologies
Positive Technologies
•added 2022/10/27 12:00 a.m.•13 views

PT-2022-26699

Name of the Vulnerable Software and Affected Versions Train Scheduler App version 1.0 Description The issue allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the Train Code, Train Name, and Destination text fields. This enables the execution of maliciou...

5.4CVSS6AI score0.00489EPSS
SaveExploits1References7
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2022/10/27 12:00 a.m.•6 views

CVE-2022-42992: Improper Neutralization of Input During Web Page Generation

Multiple stored cross-site scripting XSS vulnerabilities in Train Scheduler App v1.0 allow attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the Train Code, Train Name, and Destination text fields...

5.4CVSS6.2AI score0.00489EPSS
SaveExploits1References4
Rows per page
Query Builder