Hostnames |
ecr.indianrail.gov.in www.ecr.indianrail.gov.in indianrailways.gov.in blw.indianrailways.gov.in www.blw.indianrailways.gov.in clw.indianrailways.gov.in www.clw.indianrailways.gov.in cofmow.indianrailways.gov.in www.cofmow.indianrailways.gov.in core.indianrailways.gov.in www.core.indianrailways.gov.in cr.indianrailways.gov.in www.cr.indianrailways.gov.in dfis.indianrailways.gov.in www.dfis.indianrailways.gov.in dhr.indianrailways.gov.in www.dhr.indianrailways.gov.in dmw.indianrailways.gov.in www.dmw.indianrailways.gov.in eastcostrail.indianrailways.gov.in www.eastcostrail.indianrailways.gov.in ecr.indianrailways.gov.in www.ecr.indianrailways.gov.in er.indianrailways.gov.in www.er.indianrailways.gov.in icf.indianrailways.gov.in www.icf.indianrailways.gov.in iricen.indianrailways.gov.in www.iricen.indianrailways.gov.in irimee.indianrailways.gov.in www.irimee.indianrailways.gov.in iriset.indianrailways.gov.in www.iriset.indianrailways.gov.in iritm.indianrailways.gov.in www.iritm.indianrailways.gov.in jrrpf.indianrailways.gov.in www.jrrpf.indianrailways.gov.in mcf.indianrailways.gov.in www.mcf.indianrailways.gov.in mrvc.indianrailways.gov.in www.mrvc.indianrailways.gov.in mtp.indianrailways.gov.in www.mtp.indianrailways.gov.in nair.indianrailways.gov.in www.nair.indianrailways.gov.in ncr.indianrailways.gov.in www.ncr.indianrailways.gov.in ner.indianrailways.gov.in www.ner.indianrailways.gov.in nfr.indianrailways.gov.in www.nfr.indianrailways.gov.in nr.indianrailways.gov.in www.nr.indianrailways.gov.in nrm.indianrailways.gov.in www.nrm.indianrailways.gov.in nwr.indianrailways.gov.in www.nwr.indianrailways.gov.in plw.indianrailways.gov.in www.plw.indianrailways.gov.in rcf.indianrailways.gov.in www.rcf.indianrailways.gov.in rdso.indianrailways.gov.in www.rdso.indianrailways.gov.in rscrbc.indianrailways.gov.in www.rscrbc.indianrailways.gov.in rwf.indianrailways.gov.in www.rwf.indianrailways.gov.in rwp.indianrailways.gov.in www.rwp.indianrailways.gov.in scr.indianrailways.gov.in www.scr.indianrailways.gov.in secr.indianrailways.gov.in www.secr.indianrailways.gov.in ser.indianrailways.gov.in www.ser.indianrailways.gov.in sr.indianrailways.gov.in www.sr.indianrailways.gov.in swr.indianrailways.gov.in www.swr.indianrailways.gov.in wcr.indianrailways.gov.in www.wcr.indianrailways.gov.in wpo.indianrailways.gov.in www.wpo.indianrailways.gov.in wr.indianrailways.gov.in www.wr.indianrailways.gov.in kalkashimlarailway.in www.kalkashimlarailway.in |
Domains | indianrail.gov.in indianrailways.gov.in kalkashimlarailway.in |
Country | India |
City | New Delhi |
Organization | Centre For Railway Information Systems |
ISP | Centre For Railway Information Systems |
ASN | AS45596 |
Note: the device may not be impacted by all of these issues. The vulnerabilities are implied based on the software and version.
CVE-2020-7656 | 4.3jquery prior to 1.9.0 allows Cross-site Scripting attacks via the load method. The load method fails to recognize and remove "<script>" HTML tags that contain a whitespace character, i.e: "</script >", which results in the enclosed script logic to be executed. |
CVE-2020-11023 | 4.3In jQuery versions greater than or equal to 1.0.3 and before 3.5.0, passing HTML containing <option> elements from untrusted sources - even after sanitizing it - to one of jQuery's DOM manipulation methods (i.e. .html(), .append(), and others) may execute untrusted code. This problem is patched in jQuery 3.5.0. |
CVE-2020-11022 | 4.3In jQuery versions greater than or equal to 1.2 and before 3.5.0, passing HTML from untrusted sources - even after sanitizing it - to one of jQuery's DOM manipulation methods (i.e. .html(), .append(), and others) may execute untrusted code. This problem is patched in jQuery 3.5.0. |
CVE-2019-11358 | 4.3jQuery before 3.4.0, as used in Drupal, Backdrop CMS, and other products, mishandles jQuery.extend(true, {}, ...) because of Object.prototype pollution. If an unsanitized source object contained an enumerable __proto__ property, it could extend the native Object.prototype. |
CVE-2015-9251 | 4.3jQuery before 3.0.0 is vulnerable to Cross-site Scripting (XSS) attacks when a cross-domain Ajax request is performed without the dataType option, causing text/javascript responses to be executed. |
CVE-2012-6708 | 4.3jQuery before 1.9.0 is vulnerable to Cross-site Scripting (XSS) attacks. The jQuery(strInput) function does not differentiate selectors from HTML in a reliable fashion. In vulnerable versions, jQuery determined whether the input was HTML by looking for the '<' character anywhere in the string, giving attackers more flexibility when attempting to construct a malicious payload. In fixed versions, jQuery only deems the input to be HTML if it explicitly starts with the '<' character, limiting exploitability only to attackers who can control the beginning of a string, which is far less common. |
CVE-2011-4969 | 4.3Cross-site scripting (XSS) vulnerability in jQuery before 1.6.3, when using location.hash to select elements, allows remote attackers to inject arbitrary web script or HTML via a crafted tag. |