CVE-2026-21589

An Arbitrary File Access vulnerability exists in multiple Atlassian products, including Bitbucket , Confluence , Jira Software , Jira Service Management , Bamboo , Crowd , Crucible , and Fisheye . This flaw allows an unauthenticated remote attacker to access specific files within the web applicat...

CVE-2021-46074

CVE-2021-46074 漏洞标题：车辆服务管理系统 - 'Settings' 存储型跨站脚本（XSS） 漏洞作者：SANU P.L CVE: CVE-2021-46074 CVSS: 4.8 中危 参考链接： https://www.plsanu.com/vehicle-service-management-system-settings-stored-cross-site-scripting-xss https://nvd.nist.gov/vuln/detail/CVE-2021-46074 https://vulners.com/cve/CVE-2021-46074 描述：...

CVE-2021-46069

CVE-2021-46069 Exploit Title: 车辆服务管理系统 - 'Mechanic List' 存储型跨站脚本 XSS Exploit Author: SANU P.L CVE: CVE-2021-46069 CVSS: 4.8 MEDIUM References: https://www.plsanu.com/vehicle-service-management-system-mechanic-list-stored-cross-site-scripting-xss https://nvd.nist.gov/vuln/detail/CVE-2021-46069...

CVE-2021-46078

CVE-2021-46078 漏洞利用标题：车辆服务管理系统 - 多处文件上传导致存储型跨站脚本攻击 漏洞利用作者：SANU P.L CVE：CVE-2021-46078 CVSS：4.8 中危 参考来源： https://www.plsanu.com/vehicle-service-management-system-multiple-file-upload-leads-to-stored-cross-site-scripting https://nvd.nist.gov/vuln/detail/CVE-2021-46078...

CVE-2021-46075

CVE-2021-46075 漏洞标题：车辆服务管理系统 - '多个'权限提升导致 CRUD 操作 漏洞作者：SANU P.L CVE：CVE-2021-46075 CVSS：7.2 高危 参考资料： https://www.plsanu.com/vehicle-service-management-system-multiple-privilege-escalation-leads-to-crud-operations https://nvd.nist.gov/vuln/detail/CVE-2021-46075 https://vulners.com/cve/CVE-2021-460...

Vehicle-Service-Management-System-Service-List-Stored-Cross-Site-Scripting-XSS

CVE-2021-46072 Exploit 标题：Vehicle Service Management System - 'Service List' 存储型跨站脚本（XSS） Exploit 作者：SANU P.L CVE：CVE-2021-46072 CVSS：4.8 中危 参考： https://www.plsanu.com/vehicle-service-management-system-service-list-stored-cross-site-scripting-xss https://nvd.nist.gov/vuln/detail/CVE-2021-46072...

CVE-2021-46076

CVE-2021-46076 漏洞标题：车辆服务管理系统 - '多处' 文件上传导致代码执行 漏洞作者：SANU P.L CVE：CVE-2021-46076 CVSS：8.8 高危 参考文献： https://www.plsanu.com/vehicle-service-management-system-multiple-file-upload-leads-to-code-execution https://nvd.nist.gov/vuln/detail/CVE-2021-46076 https://vulners.com/cve/CVE-2021-46076 描述：...

CVE-2021-46068

CVE-2021-46068 漏洞利用标题：车辆服务管理系统 - 'MyAccount' 存储型跨站脚本（XSS） 漏洞利用作者：SANU P.L CVE：CVE-2021-46068 CVSS：4.8 中危 参考资料： https://www.plsanu.com/vehicle-service-management-system-myaccount-stored-cross-site-scripting-xss https://nvd.nist.gov/vuln/detail/CVE-2021-46068 https://vulners.com/cve/CVE-2021-46068...

CVE-2021-46079

CVE-2021-46079 漏洞名称: 车辆服务管理系统 - '多个'文件上传导致HTML注入 漏洞作者: SANU P.L CVE: CVE-2021-46079 CVSS: 7.2 高危 参考: https://www.plsanu.com/vehicle-service-management-system-multiple-file-upload-leads-to-html-injection https://nvd.nist.gov/vuln/detail/CVE-2021-46079 https://vulners.com/cve/CVE-2021-46079 漏洞描述:...

CVE-2021-46080

CVE-2021-46080 漏洞利用标题：Vehicle Service Management System - 多个跨站请求伪造（CSRF）导致存储型跨站脚本（XSS） 漏洞利用作者：SANU P.L CVE：CVE-2021-46080 CVSS：4.8 中危 参考链接： https://www.plsanu.com/vehicle-service-management-system-multiple-cross-site-request-forgery-csrf-leads-to-stored-cross-site-scripting-xss...

Vehicle Service Management System - Stored Cross-Site Scripting

A Stored Cross Site Scripting XSS vulnerability exists in Vehicle Service Management System 1.0 via the My Account Section in login panel. id: CVE-2021-46068 info: name: Vehicle Service Management System - Stored Cross-Site Scripting author: TenBird severity: medium description: | A Stored Cross...

CVE-2021-39115

CVE-2021-39115 邮件模板注入导致Jira Service Management Server上的代码执行 I 构建 我已在此处指导了部署+调试 在此，大家可以参考。 II 分析 在 描述 中，此CVE已明确指出漏洞位于Email Template功能。拥有管理员权限的用户可以随意修改通知邮件的模板。此漏洞需要管理员权限才能利用，因此即使有RCE也不严重，但我仍决定写这篇博客以娱乐为目的 : 正在研究SSTI的朋友可以参考。...

Vehicle-Service-Management-System-Multiple-Cookie-Stealing-Leads-to-Full-Account-Takeover

CVE-2021-46067 漏洞标题：Vehicle Service Management System - “多个”Cookie 窃取导致完全账户接管 漏洞作者：SANU P.L CVE：CVE-2021-46067 CVSS：9.8 严重 参考链接： https://www.plsanu.com/vehicle-service-management-system-multiple-cookie-stealing-leads-to-full-account-takeover https://nvd.nist.gov/vuln/detail/CVE-2021-46067...

Vehicle-Service-Management-System-Multiple-Privilege-Escalation-Leads-to-CRUD-Operations

CVE-2021-46075 漏洞标题：Vehicle Service Management System - 多重权限提升导致CRUD操作 漏洞作者：SANU P.L CVE编号：CVE-2021-46075 CVSS评分：7.2 高 参考链接： https://www.plsanu.com/vehicle-service-management-system-multiple-privilege-escalation-leads-to-crud-operations https://nvd.nist.gov/vuln/detail/CVE-2021-46075...

ehicle Service Management System 1.0 - Cross-Site Scripting

Vehicle Service Management System 1.0 contains a stored cross-site scripting vulnerability via the Category List section in login panel. id: CVE-2021-46071 info: name: ehicle Service Management System 1.0 - Cross-Site Scripting author: TenBird severity: medium description: | Vehicle Service...

Vehicle Service Management System 1.0 - Stored Cross Site Scripting

Vehicle Service Management System 1.0 contains a stored cross-site scripting vulnerability via the Mechanic List section in login panel. id: CVE-2021-46069 info: name: Vehicle Service Management System 1.0 - Stored Cross Site Scripting author: TenBird severity: medium description: | Vehicle Servi...

Vehicle Service Management System 1.0 - Stored Cross Site Scripting

Vehicle Service Management System 1.0 contains a stored cross-site scripting vulnerability via the Service List section in login panel. id: CVE-2021-46072 info: name: Vehicle Service Management System 1.0 - Stored Cross Site Scripting author: TenBird severity: medium description: | Vehicle Servic...

Vehicle Service Management System 1.0 - Cross Site Scripting

Vehicle Service Management System 1.0 contains a cross-site scripting vulnerability via the User List section in login panel. id: CVE-2021-46073 info: name: Vehicle Service Management System 1.0 - Cross Site Scripting author: TenBird severity: medium description: | Vehicle Service Management Syst...

Vehicle-Service-Management-System-Multiple-File-upload-Leads-to-Html-Injection

CVE-2021-46079 漏洞标题：Vehicle Service Management System - 'Multiple' 文件上传导致HTML注入 漏洞作者：SANU P.L CVE：CVE-2021-46079 CVSS：7.2 高 参考链接： https://www.plsanu.com/vehicle-service-management-system-multiple-file-upload-leads-to-html-injection https://nvd.nist.gov/vuln/detail/CVE-2021-46079...

-CVE-2021-41962

-CVE-2021-41962 描述 Sourcecodester Vehicle Service Management System 1.0 中存在跨站脚本（XSS）漏洞，位于 vehicleservice 中的“发送服务请求”的“所有者全名”参数。 附加信息 无 漏洞类型 跨站脚本（XSS） 产品供应商 https://www.sourcecodester.com/ 受影响的产品代码库 Vehicle Service Management System - 1.0 受影响组件 http://localhost/vehicleservice/ 攻击类型 远程 影响信息泄露 是 攻击向量...