CVE-2022-36277

The 'sReferencia', 'sDescripcion', 'txtCodigo' and 'txtDescripcion' parameters, in the frmGestionStock.aspx and frmEditServicio.aspx files in TCMAN GIM v8.0.1, could allow an attacker to perform persistent XSS attacks...

CVE-2022-36277

The connected documents confirm CVE-2022-36277 as a persistent XSS vulnerability in TCMAN GIM v8.0.1, caused by unsanitized input in the sReferencia, sDescripcion, txtCodigo, and txtDescripcion parameters of frmGestionStock.aspx and frmEditServicio.aspx. Impact is limited to XSS as described; no ...

TCMAN GIM Cross-Site Scripting Vulnerability

TCMAN GIM is a CMMS from TCMAN, Inc. that can be used in a variety of areas: industrial, facilities, healthcare, fleet and maintenance services. A cross-site scripting vulnerability exists in TCMAN GIM version v8.0.1, which stems from the sReferencia, sDescription, txtCodigo, and txtDeripcion...

CVE-2022-36277: Improper Neutralization of Input During Web Page Generation

The 'sReferencia', 'sDescripcion', 'txtCodigo' and 'txtDescripcion' parameters, in the frmGestionStock.aspx and frmEditServicio.aspx files in TCMAN GIM v8.0.1, could allow an attacker to perform persistent XSS attacks...