Skip to content
OpenAdvisories

Vendor

COWELL INFORMATION SYSTEM

1 known vulnerabilities.

Products

enterprise travel management system 1
All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Medium 6.1
    CVE-2022-39054

    COWELL INFORMATION SYSTEM CO., LTD. enterprise travel management system - Reflected XSS

    Cowell enterprise travel management system has insufficient filtering for special characters within web URL. An unauthenticated remote attacker can inject JavaScript and perform XSS (Reflected Cross-Site Scripting) attack.

    COWELL INFORMATION SYSTEM enterprise travel management system