6 matches found
CVE-2025-13648
An attacker with access to the web application ZeusWeb of the provider Microcom in this case, registration is required who has the vulnerable software could introduce arbitrary JavaScript by injecting an XSS payload into the ‘Name’ and “Surname” parameters within the ‘My Account’ section at the...
PT-2026-7507
An attacker with access to the web application ZeusWeb of the provider Microcom in this case, registration is required who has the vulnerable software could introduce arbitrary JavaScript by injecting an XSS payload into the ‘Name’ and “Surname” parameters within the ‘My Account’ section at the...
CVE-2021-46068
A Stored Cross Site Scripting XSS vulnerability exists in Vehicle Service Management System 1.0 via the My Account Section in login panel...
CVE-2021-46068
A Stored Cross Site Scripting XSS vulnerability exists in Vehicle Service Management System 1.0 via the My Account Section in login panel...
PT-2022-12546
Name of the Vulnerable Software and Affected Versions Vehicle Service Management System version 1.0 Description A Stored Cross Site Scripting XSS issue exists via the My Account Section in the login panel. This allows for malicious script execution. Recommendations For Vehicle Service Management...
CVE-2021-46068: Improper Neutralization of Input During Web Page Generation
A Stored Cross Site Scripting XSS vulnerability exists in Vehicle Service Management System 1.0 via the My Account Section in login panel...