Lucene search
+L

6 matches found

OSV
OSV
•added 2022/10/27 12:15 p.m.•18 views

CVE-2022-42992

Multiple stored cross-site scripting XSS vulnerabilities in Train Scheduler App v1.0 allow attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the Train Code, Train Name, and Destination text fields...

5.4CVSS5.9AI score0.00489EPSS
SaveExploits1References3
attackerkb
attackerkb
•added 2022/10/27 12:15 p.m.•11 views

CVE-2022-42992

Multiple stored cross-site scripting XSS vulnerabilities in Train Scheduler App v1.0 allow attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the Train Code, Train Name, and Destination text fields...

5.4CVSS6.2AI score0.00489EPSS
SaveExploits1References4
Prion
Prion
•added 2022/10/27 12:15 p.m.•23 views

Cross site scripting

Multiple stored cross-site scripting XSS vulnerabilities in Train Scheduler App v1.0 allow attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the Train Code, Train Name, and Destination text fields...

4.9CVSS5.3AI score0.00489EPSS
SaveExploits1References3Affected Software1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2022/10/27 12:00 a.m.•4 views

CVE-2022-42992: Improper Neutralization of Input During Web Page Generation

Multiple stored cross-site scripting XSS vulnerabilities in Train Scheduler App v1.0 allow attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the Train Code, Train Name, and Destination text fields...

5.4CVSS6.2AI score0.00489EPSS
SaveExploits1References4
Cvelist
Cvelist
•added 2022/10/27 12:00 a.m.•51 views

CVE-2022-42992

Multiple stored cross-site scripting XSS vulnerabilities in Train Scheduler App v1.0 allow attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the Train Code, Train Name, and Destination text fields...

5.6AI score0.00489EPSS
SaveExploits1References1
Positive Technologies
Positive Technologies
•added 2022/10/27 12:00 a.m.•13 views

PT-2022-26699

Name of the Vulnerable Software and Affected Versions Train Scheduler App version 1.0 Description The issue allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the Train Code, Train Name, and Destination text fields. This enables the execution of maliciou...

5.4CVSS6AI score0.00489EPSS
SaveExploits1References7
Rows per page
Query Builder