CVE-2021-39115

CVE-2021-39115 La inyección de plantillas en las plantillas de correo electrónico conduce a la ejecución de código en Jira Service Management Server I Construcción He explicado cómo desplegar y depurar aquí, pueden consultarlo. II Análisis En la Descripción de este CVE ya se indica claramente que...

Vehicle Service Management System - Stored Cross-Site Scripting

A Stored Cross Site Scripting XSS vulnerability exists in Vehicle Service Management System 1.0 via the My Account Section in login panel. id: CVE-2021-46068 info: name: Vehicle Service Management System - Stored Cross-Site Scripting author: TenBird severity: medium description: | A Stored Cross...

Vehicle Service Management System 1.0 - Stored Cross Site Scripting

Vehicle Service Management System 1.0 contains a stored cross-site scripting vulnerability via the Mechanic List section in login panel. id: CVE-2021-46069 info: name: Vehicle Service Management System 1.0 - Stored Cross Site Scripting author: TenBird severity: medium description: | Vehicle Servi...

ehicle Service Management System 1.0 - Cross-Site Scripting

Vehicle Service Management System 1.0 contains a stored cross-site scripting vulnerability via the Category List section in login panel. id: CVE-2021-46071 info: name: ehicle Service Management System 1.0 - Cross-Site Scripting author: TenBird severity: medium description: | Vehicle Service...

Vehicle Service Management System 1.0 - Cross Site Scripting

Vehicle Service Management System 1.0 contains a cross-site scripting vulnerability via the User List section in login panel. id: CVE-2021-46073 info: name: Vehicle Service Management System 1.0 - Cross Site Scripting author: TenBird severity: medium description: | Vehicle Service Management Syst...

Vehicle Service Management System 1.0 - Stored Cross Site Scripting

Vehicle Service Management System 1.0 contains a stored cross-site scripting vulnerability via the Service List section in login panel. id: CVE-2021-46072 info: name: Vehicle Service Management System 1.0 - Stored Cross Site Scripting author: TenBird severity: medium description: | Vehicle Servic...

Vehicle-Service-Management-System-Multiple-Cookie-Stealing-Leads-to-Full-Account-Takeover

CVE-2021-46067 Título del Exploit: Sistema de Gestión de Servicio de Vehículos - 'Múltiple' Robo de Cookies Conduce a la Toma Completa de la Cuenta Autor del Exploit: SANU P.L CVE: CVE-2021-46067 CVSS: 9.8 CRÍTICO Referencias:...

Vehicle-Service-Management-System-Multiple-Privilege-Escalation-Leads-to-CRUD-Operations

CVE-2021-46075 Título del Exploit: Vehicle Service Management System - 'Multiple' Escalada de Privilegios Conduce a Operaciones CRUD Autor del Exploit: SANU P.L CVE: CVE-2021-46075 CVSS: 7.2 ALTA Referencias:...

Vehicle-Service-Management-System-Multiple-File-upload-Leads-to-Html-Injection

CVE-2021-46079 Exploit Title: Vehicle Service Management System - 'Multiple' File upload Leads to Html Injection Exploit Author: SANU P.L CVE: CVE-2021-46079 CVSS: 7.2 HIGH References: https://www.plsanu.com/vehicle-service-management-system-multiple-file-upload-leads-to-html-injection...

-CVE-2021-41962

-CVE-2021-41962 Descripción Existe una vulnerabilidad de Cross Site Scripting XSS en Sourcecodester Vehicle Service Management System 1.0 a través del parámetro Owner fullname en un Send Service Request en vehicleservice. Información adicional N/A Tipo de vulnerabilidad Cross Site Scripting XSS...

Vehicle-Service-Management-System-MyAccount-Stored-Cross-Site-Scripting-XSS

CVE-2021-46068 Exploit Title: Vehicle Service Management System - 'MyAccount' Stored Cross-Site Scripting XSS Almacenado Exploit Author: SANU P.L CVE: CVE-2021-46068 CVSS: 4.8 MEDIO Referencias: https://www.plsanu.com/vehicle-service-management-system-myaccount-stored-cross-site-scripting-xss...

Vehicle-Service-Management-System-Service-Requests-Stored-Cross-Site-Scripting-XSS

CVE-2021-46070 Título del Exploit: Vehicle Service Management System - 'Service Requests' Cross Site Scripting XSS almacenado Autor del Exploit: SANU P.L CVE: CVE-2021-46070 CVSS: 4.8 MEDIO Referencias:...

Vehicle-Service-Management-System-User-List-Stored-Cross-Site-Scripting-XSS

CVE-2021-46073 Título del Exploit: Vehicle Service Management System - 'User List' Stored Cross Site Scripting XSS Autor del Exploit: SANU P.L CVE: CVE-2021-46073 CVSS: 4.8 MEDIUM Referencias: https://www.plsanu.com/vehicle-service-management-system-user-list-stored-cross-site-scripting-xss...

Vehicle-Service-Management-System-Settings-Stored-Cross-Site-Scripting-XSS

CVE-2021-46074 Título del exploit: Vehicle Service Management System - 'Settings' Stored Cross Site Scripting XSS Autor del exploit: SANU P.L CVE: CVE-2021-46074 CVSS: 4.8 MEDIO Referencias: https://www.plsanu.com/vehicle-service-management-system-settings-stored-cross-site-scripting-xss...

Vehicle-Service-Management-System-Multiple-File-upload-Leads-to-Stored-Cross-Site-Scripting

CVE-2021-46078 Título del Exploit: Vehicle Service Management System - 'Múltiple' Carga de archivos conduce a Cross-Site Scripting Almacenado Autor del Exploit: SANU P.L CVE: CVE-2021-46078 CVSS: 4.8 MEDIO Referencias:...

Vehicle-Service-Management-System-Category-List-Stored-Cross-Site-Scripting-XSS

CVE-2021-46071 Título del Exploit: Vehicle Service Management System - 'Category List' Cross Site Scripting XSS Almacenado Autor del Exploit: SANU P.L CVE: CVE-2021-46071 CVSS: 4.8 MEDIO Referencias:...

Vehicle-Service-Management-System-Multiple-File-upload-Leads-to-Code-Execution

CVE-2021-46076 Título del Exploit: Vehicle Service Management System - La subida de múltiples archivos conduce a la ejecución de código Autor del Exploit: SANU P.L CVE: CVE-2021-46076 CVSS: 8.8 ALTA Referencias:...

Vehicle-Service-Management-System-Mechanic-List-Stored-Cross-Site-Scripting-XSS

CVE-2021-46069 Título del Exploit: Vehicle Service Management System - 'Mechanic List' Cross Site Scripting XSS Almacenado Autor del Exploit: SANU P.L CVE: CVE-2021-46069 CVSS: 4.8 MEDIO Referencias:...

Vehicle-Service-Management-System-Multiple-Cross-Site-Request-Forgery-CSRF-Leads-to-XSS

CVE-2021-46080 Exploit Title: Vehicle Service Management System - 'Múltiples' vulnerabilidades de Cross-Site Request Forgery CSRF conducen a Cross Site Scripting Almacenado XSS Exploit Author: SANU P.L CVE: CVE-2021-46080 CVSS: 4.8 MEDIA References:...

CVE-2026-7861

Deserialization of untrusted data vulnerability in Next4Biz Information Technologies Inc. CSM Customer Service Management allows Code Injection. This issue affects CSM Customer Service Management: before 8.0.3...