TI-2022-03463 CVE-2022-3774 · GHSA-phm7-hv7v-cqqr
SourceCodester Train Scheduler App resource injection
Priority HIGH 72
A vulnerability was found in SourceCodester Train Scheduler App 1.0 and classified as critical.
Train Scheduler App Project
Records3All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical1CVSS 9.0–10.0
CVSS high0CVSS 7.0–8.9
Exploited now
Train Scheduler App Project records in CISA KEVNo Train Scheduler App Project vulnerabilities are listed in CISA KEV.
Components
Products in the NVD configurations · select one to filter the recordsRecords
3 records
TI-2022-20967 CVE-2022-42992 · GHSA-gqvp-5g3v-2h3j
Multiple stored cross-site scripting (XSS) vulnerabilities in Train Scheduler App v1.0…
Priority MEDIUM 58
Multiple stored cross-site scripting (XSS) vulnerabilities in Train Scheduler App v1.0 allow attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the Train Code, Train Name, and Destinat…
TI-2022-21020 CVE-2022-43079 · GHSA-wv83-gr92-97gp
A cross-site scripting (XSS) vulnerability in /admin/add-fee.php of Train Scheduler App…
Priority LOW 28
A cross-site scripting (XSS) vulnerability in /admin/add-fee.php of Train Scheduler App v1.0 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the cmddept parameter.