CVE-2022-36277 — SQL injection vulnerability in TCMAN GIM

CVE-2022-36277

SQL injection vulnerability in TCMAN GIM PUBLISHED

Description (CNA)

The 'sReferencia', 'sDescripcion', 'txtCodigo' and 'txtDescripcion' parameters, in the frmGestionStock.aspx and frmEditServicio.aspx files in TCMAN GIM v8.0.1, could allow an attacker to perform persistent XSS attacks.

Affected (CNA)

Vendor / product	Versions
TCMAN / GIM	affected v8.0.1

CWE

CWE-79

References

https://www.incibe.es/en/incibe-cert/notices/aviso/multiple-vulnerabilities-tcman-gim

ADP enrichment

CVE

No English description supplied.

https://www.incibe.es/en/incibe-cert/notices/aviso/multiple-vulnerabilities-tcman-gim

CISA-ADP

No English description supplied.

No references supplied.