CVE-2022-36277

The 'sReferencia', 'sDescripcion', 'txtCodigo' and 'txtDescripcion' parameters, in the frmGestionStock.aspx and frmEditServicio.aspx files in TCMAN GIM v8.0.1, could allow an attacker to perform persistent XSS attacks...

CVE-2022-36277

The connected documents confirm CVE-2022-36277 as a persistent XSS vulnerability in TCMAN GIM v8.0.1, caused by unsanitized input in the sReferencia, sDescripcion, txtCodigo, and txtDescripcion parameters of frmGestionStock.aspx and frmEditServicio.aspx. Impact is limited to XSS as described; no ...

TCMAN GIM Cross-Site Scripting Vulnerability

TCMAN GIM is a CMMS from TCMAN, Inc. that can be used in a variety of areas: industrial, facilities, healthcare, fleet and maintenance services. A cross-site scripting vulnerability exists in TCMAN GIM version v8.0.1, which stems from the sReferencia, sDescription, txtCodigo, and txtDeripcion...