Lucene search
+L

7 matches found

OSV
OSV
•added 2022/10/27 12:15 p.m.•16 views

CVE-2022-42992

Multiple stored cross-site scripting XSS vulnerabilities in Train Scheduler App v1.0 allow attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the Train Code, Train Name, and Destination text fields...

5.4CVSS5.9AI score0.00489EPSS
SaveExploits1References3
attackerkb
attackerkb
•added 2022/10/27 12:15 p.m.•11 views

CVE-2022-42992

Multiple stored cross-site scripting XSS vulnerabilities in Train Scheduler App v1.0 allow attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the Train Code, Train Name, and Destination text fields...

5.4CVSS6.2AI score0.00489EPSS
SaveExploits1References4
Prion
Prion
•added 2022/10/27 12:15 p.m.•22 views

Cross site scripting

Multiple stored cross-site scripting XSS vulnerabilities in Train Scheduler App v1.0 allow attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the Train Code, Train Name, and Destination text fields...

4.9CVSS5.3AI score0.00489EPSS
SaveExploits1References3Affected Software1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2022/10/27 12:00 a.m.•3 views

CVE-2022-42992: Improper Neutralization of Input During Web Page Generation

Multiple stored cross-site scripting XSS vulnerabilities in Train Scheduler App v1.0 allow attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the Train Code, Train Name, and Destination text fields...

5.4CVSS6.2AI score0.00489EPSS
SaveExploits1References4
Cvelist
Cvelist
•added 2022/10/27 12:00 a.m.•49 views

CVE-2022-42992

Multiple stored cross-site scripting XSS vulnerabilities in Train Scheduler App v1.0 allow attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the Train Code, Train Name, and Destination text fields...

5.6AI score0.00489EPSS
SaveExploits1References1
Positive Technologies
Positive Technologies
•added 2022/10/27 12:00 a.m.•12 views

PT-2022-26699

Name of the Vulnerable Software and Affected Versions Train Scheduler App version 1.0 Description The issue allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the Train Code, Train Name, and Destination text fields. This enables the execution of maliciou...

5.4CVSS6AI score0.00489EPSS
SaveExploits1References7
Packet Storm
Packet Storm
•added 2022/01/10 12:00 a.m.•261 views

Online Railway Reservation System 1.0 Cross Site Scripting

Exploit Title: Online Railway Reservation System 1.0 - 'Multiple' Stored Cross Site Scripting XSS Unauthenticated Date: 07/01/2022 Exploit Author: Zachary Asher Vendor Homepage: https://www.sourcecodester.com/php/15121/online-railway-reservation-system-phpoop-project-free-source-code.html Softwar...

7.4AI score
SaveExploits0
Rows per page
Query Builder