bus.com
http://bus.com/ CVE-2022-35155
MEDIUM
Bus Pass Management System 1.0 - Cross-Site Scripting (XSS)
Record summary
CVE-2022-35155 has a selected CVSS score of 6.1 (medium); EIP currently links 1 catalogued exploit.
Description
Bus Pass Management System v1.0 was discovered to contain a reflected cross-site scripting (XSS) vulnerability via the searchdata parameter.
Description source: CVE List
Exploitation context
Available material
- Catalogued exploits
- 1
CISA SSVC decision
ExploitationPoC
AutomatableNo
Technical impactPartial
CISA Coordinator · SSVC 2.0.3 · Evaluated Apr 23, 2025 · Source: CVE List
Proofs of concept
1Catalogued exploits
ExploitDBBus Pass Management System 1.0 - Cross-Site Scripting (XSS)ExploitDB exploitby Ali AlipourNot analyzed1 file
References
5phpgurukul.com
http://phpgurukul.com/ github.com
https://github.com/shellshok3/Cross-Site-Scripting-XSS/blob/main/Bus%20Pass%20Management%20System%201.0.md nvd.nist.gov
https://nvd.nist.gov/vuln/detail/CVE-2022-35155 packetstormsecurity.com
https://packetstormsecurity.com/files/168555/Bus-Pass-Management-System-1.0-Cross-Site-Scripting.html