← Back

Train Scheduler App Project

train_scheduler_app_project

3 CVEs • 1 product

Products (1)

Click to collapse
Toggle
Train Scheduler App
train_scheduler_app
3 CVEs

CVEs (3)

CVE
VENDORS
PRODUCTS
UPDATED
PUBLISHED
CVSS
CVE-2022-43079
1Train Scheduler App Project
1Train Scheduler App
Jun 17, 2026
Nov 1, 2022
N/A· v4
6.1 MEDIUM· v3
N/A· v2
A cross-site scripting (XSS) vulnerability in /admin/add-fee.php of Train Scheduler App v1.0 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the cmddept parameter.
CVE-2022-3774
1Train Scheduler App Project
1Train Scheduler App
Jun 17, 2026
Oct 31, 2022
N/A· v4
9.1 CRITICAL· v3
N/A· v2
A vulnerability was found in SourceCodester Train Scheduler App 1.0 and classified as critical. Affected by this issue is some unknown functionality of the file /train_scheduler_app/?action=delete. The manipulation of th...Show more
A vulnerability was found in SourceCodester Train Scheduler App 1.0 and classified as critical. Affected by this issue is some unknown functionality of the file /train_scheduler_app/?action=delete. The manipulation of the argument id leads to improper control of resource identifiers. The attack may be launched remotely. The identifier of this vulnerability is VDB-212504.Show less
CVE-2022-42992
1Train Scheduler App Project
1Train Scheduler App
Jul 9, 2026
Oct 27, 2022
N/A· v4
5.4 MEDIUM· v3
N/A· v2
Multiple stored cross-site scripting (XSS) vulnerabilities in Train Scheduler App v1.0 allow attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the Train Code, Train Name, and Destinat...Show more
Multiple stored cross-site scripting (XSS) vulnerabilities in Train Scheduler App v1.0 allow attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the Train Code, Train Name, and Destination text fields.Show less