Lucene search
+L

6 matches found

osv_cve
osv_cve
•added 2022/10/27 12:15 p.m.•23 views

CVE-2022-42992

Multiple stored cross-site scripting XSS vulnerabilities in Train Scheduler App v1.0 allow attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the Train Code, Train Name, and Destination text fields...

5.4CVSS5.9AI score0.00544EPSS
SaveExploits1References3
attackerkb
attackerkb
•added 2022/10/27 12:15 p.m.•16 views

CVE-2022-42992

Multiple stored cross-site scripting XSS vulnerabilities in Train Scheduler App v1.0 allow attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the Train Code, Train Name, and Destination text fields...

5.4CVSS6.2AI score0.00544EPSS
SaveExploits1References4
Prion
Prion
•added 2022/10/27 12:15 p.m.•28 views

Cross site scripting

Multiple stored cross-site scripting XSS vulnerabilities in Train Scheduler App v1.0 allow attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the Train Code, Train Name, and Destination text fields...

4.9CVSS5.3AI score0.00544EPSS
SaveExploits1References3Affected Software1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2022/10/27 12:00 a.m.•10 views

CVE-2022-42992: Improper Neutralization of Input During Web Page Generation

Multiple stored cross-site scripting XSS vulnerabilities in Train Scheduler App v1.0 allow attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the Train Code, Train Name, and Destination text fields...

5.4CVSS6.2AI score0.00544EPSS
SaveExploits1References4
Cvelist
Cvelist
•added 2022/10/27 12:00 a.m.•57 views

CVE-2022-42992

Multiple stored cross-site scripting XSS vulnerabilities in Train Scheduler App v1.0 allow attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the Train Code, Train Name, and Destination text fields...

5.6AI score0.00544EPSS
SaveExploits1References1
Positive Technologies
Positive Technologies
•added 2022/10/27 12:00 a.m.•20 views

PT-2022-26699

Name of the Vulnerable Software and Affected Versions Train Scheduler App version 1.0 Description The issue allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the Train Code, Train Name, and Destination text fields. This enables the execution of maliciou...

5.4CVSS6AI score0.00544EPSS
SaveExploits1References7
Rows per page
Query Builder