CVE-2022-36277

The 'sReferencia', 'sDescripcion', 'txtCodigo' and 'txtDescripcion' parameters, in the frmGestionStock.aspx and frmEditServicio.aspx files in TCMAN GIM v8.0.1, could allow an attacker to perform persistent XSS attacks...

CVE-2022-36277

The connected documents confirm CVE-2022-36277 as a persistent XSS vulnerability in TCMAN GIM v8.0.1, caused by unsanitized input in the sReferencia, sDescripcion, txtCodigo, and txtDescripcion parameters of frmGestionStock.aspx and frmEditServicio.aspx. Impact is limited to XSS as described; no ...

CVE-2022-36277 SQL injection vulnerability in TCMAN GIM

The 'sReferencia', 'sDescripcion', 'txtCodigo' and 'txtDescripcion' parameters, in the frmGestionStock.aspx and frmEditServicio.aspx files in TCMAN GIM v8.0.1, could allow an attacker to perform persistent XSS attacks...