Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

3 records

Vendor: Train Scheduler App Project Clear all filters
TI-2022-03463 CVE-2022-3774 · GHSA-phm7-hv7v-cqqr

SourceCodester Train Scheduler App resource injection

Priority HIGH 72

A vulnerability was found in SourceCodester Train Scheduler App 1.0 and classified as critical.

CVSS 3.1CRITICAL 9.1 Network No auth No interaction EPSS 0.01496 Published 2022-10-31 No fix listed CWE-99
TI-2022-20967 CVE-2022-42992 · GHSA-gqvp-5g3v-2h3j

Multiple stored cross-site scripting (XSS) vulnerabilities in Train Scheduler App v1.0…

Priority MEDIUM 58

Multiple stored cross-site scripting (XSS) vulnerabilities in Train Scheduler App v1.0 allow attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the Train Code, Train Name, and Destinat…

CVSS 3.1MEDIUM 5.4 Network Low privileges User interaction EPSS 0.00544 Published 2022-10-27 No fix listed CWE-79