Vehicle-Service-Management-System-Multiple-Cross-Site-Request-Forgery-CSRF-Leads-to-XSS

CVE-2021-46080 Exploit Title: Vehicle Service Management System - 'Múltiples' vulnerabilidades de Cross-Site Request Forgery CSRF conducen a Cross Site Scripting Almacenado XSS Exploit Author: SANU P.L CVE: CVE-2021-46080 CVSS: 4.8 MEDIA References:...

CVE-2021-46080

creationtimestamp| type| source ---|---|--- 2022-01-06 18:41:15+00:00| seen| https://t.me/cibsecurity/35060 2022-01-14 21:47:00+00:00| published-proof-of-concept| https://t.me/GithubRedTeam/1337 2022-01-14 21:51:10+00:00| published-proof-of-concept| https://t.me/GithubRedTeam/1338 2026-05-12...

CVE-2021-46080

A Cross Site Request Forgery CSRF vulnerability exists in Vehicle Service Management System 1.0. An successful CSRF attacks leads to Stored Cross Site Scripting Vulnerability...

CVE-2021-46080

The CVE-2021-46080 entry refers to Vehicle Service Management System 1.0 and describes a CSRF flaw that enables a stored XSS vulnerability. Public sources (CNVD/CNNVD and NVD) attribute the issue to forged-token validation failures in cross-site requests, leading to stored XSS when an attacker lu...