Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
A cross-site scripting (XSS) vulnerability in /admin/add-fee.php of Train Scheduler App v1.0 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the cmddept parameter.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
Train Scheduler App 跨站脚本漏洞
Vulnerability Description
Train Scheduler App是Carlo Montero个人开发者的一个火车调度应用程序。 Train Scheduler App v1.0版本存在安全漏洞，该漏洞源于/admin/add-fee中包含跨站点脚本（XSS）漏洞。攻击者利用该漏洞通过注入cmddept参数的特制有效载荷执行任意web脚本或HTML。
CVSS Information
N/A
Vulnerability Type
N/A