CVE-2021-46068

A Stored Cross Site Scripting XSS vulnerability exists in Vehicle Service Management System 1.0 via the My Account Section in login panel...

CVE-2021-46068

The CVE-2021-46068 issue affects Vehicle Service Management System 1.0, specifically a Stored Cross‑Site Scripting (XSS) vulnerability in the My Account section of the login panel. Exploitation could allow attackers to inject malicious scripts into the application and, as described in connected s...

CVE-2021-46067

The provided documents confirm CVE-2021-46067 affects Vehicle Service Management System (VSMS) 1.0, where an attacker can steal cookies to achieve full account takeover. The root cause cited across sources is lack of proper protection against cookies, enabling cookie theft. Public references desc...

CVE-2021-46069

CVE-2021-46069 affects Vehicle Service Management System 1.0. The vulnerability is a Stored Cross-Site Scripting (XSS) via the Mechanic List section in the login panel, caused by insufficient input validation/escaping. Several connected sources (NVD, CNVD, nuclei template) confirm the issue and i...

CVE-2021-46069

A Stored Cross Site Scripting XSS vulnerability exists in Vehicle Service Management System 1.0 via the Mechanic List Section in login panel...

CVE-2021-46070

The CVE-2021-46070 entry corresponds to a stored XSS vulnerability in Sourcecodester Vehicle Service Management System 1.0. Multiple connected sources (CNVD-2022-02641 and CNVD/ CNNVD records) describe that the issue arises in the login panel’s Service Requests portion due to a lack of proper inp...

CVE-2021-46071

CVE-2021-46071 affects Vehicle Service Management System 1.0. It is a stored XSS via the Category List section in the login panel, caused by insufficient input validation/escaping. Impact stated: injection of malicious scripts into pages viewed by users, with potential data theft, session hijacki...

CVE-2021-46071

A Stored Cross Site Scripting XSS vulnerability exists in Vehicle Service Management System 1.0 via the Category List Section in login panel...

CVE-2021-46072

CVE-2021-46072 affects Vehicle Service Management System 1.0, with a stored cross-site scripting (XSS) vulnerability in the Service List section of the login panel. The issue arises from insufficient input filtering/escaping, enabling attacker-supplied payloads to be stored and later executed by ...

CVE-2021-46072

A Stored Cross Site Scripting XSS vulnerability exists in Vehicle Service Management System 1.0 via the Service List Section in login panel...

CVE-2021-46073

Vehicle Service Management System 1.0 contains a Cross-Site Scripting (XSS) vulnerability in the User List section of the login panel. The root cause is insufficient input filtering/escaping in that area, enabling stored XSS. Impact per sources includes injection of malicious scripts into pages v...

CVE-2021-46074

Sourcecodester Vehicle Service Management System 1.0 is affected by a Stored Cross-Site Scripting (XSS) vulnerability in the Settings section of the login panel. The vulnerability stems from insufficient validation of client-side data, allowing injected scripts to be stored and potentially execut...

CVE-2021-46076

Sourcecodester Vehicle Service Management System 1.0 is vulnerable to File upload. An attacker can upload a malicious php file in multiple endpoints it leading to Code Execution...

CVE-2021-46080

A Cross Site Request Forgery CSRF vulnerability exists in Vehicle Service Management System 1.0. An successful CSRF attacks leads to Stored Cross Site Scripting Vulnerability...

CVE-2021-46076

Sourcecodester Vehicle Service Management System 1.0 is vulnerable to File upload. An attacker can upload a malicious php file in multiple endpoints it leading to Code Execution...

Cross site request forgery (csrf)

A Cross Site Request Forgery CSRF vulnerability exists in Vehicle Service Management System 1.0. An successful CSRF attacks leads to Stored Cross Site Scripting Vulnerability...

CVE-2021-46075

The CVE-2021-46075 entry concerns Sourcecodester Vehicle Service Management System 1.0. The vulnerability is a Privilege Escalation where Staff accounts can access admin resources and perform CRUD operations due to insufficient access controls. Reported impact indicates remote-style potential to ...

CVE-2021-46076

CVE-2021-46076 affects Sourcecodester Vehicle Service Management System 1.0. Multiple connected sources confirm a file upload vulnerability that allows uploading a malicious PHP file to various endpoints, leading to Code Execution. CVSSv3.1 base score 8.8 (HIGH) with NETWORK access, LOW attack co...

CVE-2021-46076

Sourcecodester Vehicle Service Management System 1.0 is vulnerable to File upload. An attacker can upload a malicious php file in multiple endpoints it leading to Code Execution...

CVE-2021-46080

A Cross Site Request Forgery CSRF vulnerability exists in Vehicle Service Management System 1.0. An successful CSRF attacks leads to Stored Cross Site Scripting Vulnerability...