212 matches found
Cross site scripting
A Stored Cross Site Scripting XSS vulnerability exists in Vehicle Service Management System 1.0 via the Category List Section in login panel...
Cross site scripting
A Stored Cross Site Scripting XSS vulnerability exists in Vehicle Service Management System 1.0 via the Service List Section in login panel...
Cross site scripting
A Stored Cross Site Scripting XSS vulnerability exists in Vehicle Service Management System 1.0 via the My Account Section in login panel...
Cross site scripting
A Stored Cross Site Scripting XSS vulnerability exists in Vehicle Service Management System 1.0 via the Mechanic List Section in login panel...
CVE-2021-46068
A Stored Cross Site Scripting XSS vulnerability exists in Vehicle Service Management System 1.0 via the My Account Section in login panel...
CVE-2021-45745
Bludit 3.13.1 is affected by a Stored Cross-Site Scripting (XSS) vulnerability in the About Plugin within the login panel. The root cause is lack of input filtering/escaping in the About plugin, enabling an attacker to store malicious scripts that could be executed in the victim’s browser. The CV...
CVE-2021-45744
A Stored Cross Site Scripting XSS vulnerability exists in bludit 3.13.1 via the TAGS section in login panel...
CVE-2021-45744
CVE-2021-45744 describes a Stored Cross-Site Scripting (XSS) in Bludit 3.13.1 triggered via the TAGS section in the login panel. Reported consistently across sources (NVD, CNVD, Red Hat, OSV etc.) with an input-validation failure in the tag area leading to possible client-side code execution. The...
CVE-2021-46069
A Stored Cross Site Scripting XSS vulnerability exists in Vehicle Service Management System 1.0 via the Mechanic List Section in login panel...
CVE-2021-46069
CVE-2021-46069 affects Vehicle Service Management System 1.0. The vulnerability is a Stored Cross-Site Scripting (XSS) via the Mechanic List section in the login panel, caused by insufficient input validation/escaping. Several connected sources (NVD, CNVD, nuclei template) confirm the issue and i...
CVE-2021-46070
A Stored Cross Site Scripting XSS vulnerability exists in Vehicle Service Management System 1.0 via the Service Requests Section in login panel...
CVE-2021-46071
A Stored Cross Site Scripting XSS vulnerability exists in Vehicle Service Management System 1.0 via the Category List Section in login panel...
CVE-2021-46072
A Stored Cross Site Scripting XSS vulnerability exists in Vehicle Service Management System 1.0 via the Service List Section in login panel...
CVE-2021-46072
CVE-2021-46072 affects Vehicle Service Management System 1.0, with a stored cross-site scripting (XSS) vulnerability in the Service List section of the login panel. The issue arises from insufficient input filtering/escaping, enabling attacker-supplied payloads to be stored and later executed by ...
CVE-2021-46073
A Stored Cross Site Scripting XSS vulnerability exists in Sourcecodester Vehicle Service Management System 1.0 via the User List Section in login panel...
CVE-2021-46074
A Stored Cross Site Scripting XSS vulnerability exists in Sourcecodester Vehicle Service Management System 1.0 via the Settings Section in login panel...
Sourcecodester Vehicle Service Management System 跨站脚本漏洞
Sourcecodester Vehicle Service Management System is an open source PHP project. A simple Web application for automotive repair/service stores or businesses. sourcecodester Vehicle Service Management System version 1.0 has a cross-site scripting vulnerability that stems from a lack of valid...
Sourcecodester Vehicle Service Management System 跨站脚本漏洞
Sourcecodester Vehicle Service Management System is an open source PHP project. Sourcecodester Vehicle Service Management System version 1.0 contains a cross-site scripting vulnerability that stems from the lack of effective filtering and escaping in the user list section of the software's login...
Bludit 跨站脚本漏洞
A cross-site scripting vulnerability exists in Bludit, an open source lightweight blog content management system CMS, which stems from a tag section in the product's login panel that does not validate input data. An attacker could execute client-side code through this vulnerability...
Sourcecodester Vehicle Service Management System 跨站脚本漏洞
Sourcecodester Vehicle Service Management System is an open source PHP project. A simple Web application for automotive repair/service stores or businesses. sourcecodester Vehicle Service Management System version 1.0 has a cross-site scripting vulnerability that stems from a lack of effective...