Unrestricted file upload

An Unrestricted File Upload vulnerability exists in Sourcecodester Vehicle Service Management System 1.0. A remote attacker can upload malicious files leading to Html Injection...

Cross site scripting

A Stored Cross Site Scripting XSS vulnerability exists in Vehicle Service Management System 1.0 via the Service Requests Section in login panel...

Cross site scripting

A Stored Cross Site Scripting XSS vulnerability exists in Sourcecodester Vehicle Service Management System 1.0 via the Settings Section in login panel...

Cross site scripting

A Stored Cross Site Scripting XSS vulnerability exists in Vehicle Service Management System 1.0 via the Mechanic List Section in login panel...

Unrestricted file upload

An Unrestricted File Upload vulnerability exists in Sourcecodester Vehicle Service Management System 1.0. A remote attacker can upload malicious files leading to a Stored Cross-Site Scripting vulnerability...

Privilege escalation

A Privilege Escalation vulnerability exists in Sourcecodester Vehicle Service Management System 1.0. Staff account users can access the admin resources and perform CRUD Operations...

Cross site scripting

A Stored Cross Site Scripting XSS vulnerability exists in Vehicle Service Management System 1.0 via the Service List Section in login panel...

Cross site scripting

A Stored Cross Site Scripting XSS vulnerability exists in Sourcecodester Vehicle Service Management System 1.0 via the User List Section in login panel...

CVE-2021-46079

An Unrestricted File Upload vulnerability exists in Sourcecodester Vehicle Service Management System 1.0. A remote attacker can upload malicious files leading to Html Injection...

CVE-2021-46079

CVE-2021-46079 affects Sourcecodester Vehicle Service Management System 1.0. The vulnerability is an unrestricted file upload that enables a remote attacker to upload malicious files, leading to HTML injection . Multiple sources (NVD, Red Hat, CVE lists) corroborate this description. The availabl...

CVE-2021-46078

An Unrestricted File Upload vulnerability exists in Sourcecodester Vehicle Service Management System 1.0. A remote attacker can upload malicious files leading to a Stored Cross-Site Scripting vulnerability...

CVE-2021-46078

Sourcecodester Vehicle Service Management System 1.0 has an Unrestricted File Upload vulnerability that can allow a remote attacker to upload malicious files, leading to Stored Cross-Site Scripting. Multiple sources (NVD, Red Hat, CNVD, CVE listing) confirm the issue and its impact as stored XSS,...

CVE-2021-46068

A Stored Cross Site Scripting XSS vulnerability exists in Vehicle Service Management System 1.0 via the My Account Section in login panel...

CVE-2021-46068

The CVE-2021-46068 issue affects Vehicle Service Management System 1.0, specifically a Stored Cross‑Site Scripting (XSS) vulnerability in the My Account section of the login panel. Exploitation could allow attackers to inject malicious scripts into the application and, as described in connected s...

CVE-2021-46067

In Vehicle Service Management System 1.0 an attacker can steal the cookies leading to Full Account Takeover...

CVE-2021-46067

The provided documents confirm CVE-2021-46067 affects Vehicle Service Management System (VSMS) 1.0, where an attacker can steal cookies to achieve full account takeover. The root cause cited across sources is lack of proper protection against cookies, enabling cookie theft. Public references desc...

CVE-2021-46069

A Stored Cross Site Scripting XSS vulnerability exists in Vehicle Service Management System 1.0 via the Mechanic List Section in login panel...

CVE-2021-46069

CVE-2021-46069 affects Vehicle Service Management System 1.0. The vulnerability is a Stored Cross-Site Scripting (XSS) via the Mechanic List section in the login panel, caused by insufficient input validation/escaping. Several connected sources (NVD, CNVD, nuclei template) confirm the issue and i...

CVE-2021-46070

The CVE-2021-46070 entry corresponds to a stored XSS vulnerability in Sourcecodester Vehicle Service Management System 1.0. Multiple connected sources (CNVD-2022-02641 and CNVD/ CNNVD records) describe that the issue arises in the login panel’s Service Requests portion due to a lack of proper inp...

CVE-2021-46071

CVE-2021-46071 affects Vehicle Service Management System 1.0. It is a stored XSS via the Category List section in the login panel, caused by insufficient input validation/escaping. Impact stated: injection of malicious scripts into pages viewed by users, with potential data theft, session hijacki...