CVE-2021-46070

The CVE-2021-46070 entry corresponds to a stored XSS vulnerability in Sourcecodester Vehicle Service Management System 1.0. Multiple connected sources (CNVD-2022-02641 and CNVD/ CNNVD records) describe that the issue arises in the login panel’s Service Requests portion due to a lack of proper inp...

CVE-2021-46071

CVE-2021-46071 affects Vehicle Service Management System 1.0. It is a stored XSS via the Category List section in the login panel, caused by insufficient input validation/escaping. Impact stated: injection of malicious scripts into pages viewed by users, with potential data theft, session hijacki...

CVE-2021-46071

A Stored Cross Site Scripting XSS vulnerability exists in Vehicle Service Management System 1.0 via the Category List Section in login panel...

CVE-2021-46072

CVE-2021-46072 affects Vehicle Service Management System 1.0, with a stored cross-site scripting (XSS) vulnerability in the Service List section of the login panel. The issue arises from insufficient input filtering/escaping, enabling attacker-supplied payloads to be stored and later executed by ...

CVE-2021-46072

A Stored Cross Site Scripting XSS vulnerability exists in Vehicle Service Management System 1.0 via the Service List Section in login panel...

CVE-2021-46073

Vehicle Service Management System 1.0 contains a Cross-Site Scripting (XSS) vulnerability in the User List section of the login panel. The root cause is insufficient input filtering/escaping in that area, enabling stored XSS. Impact per sources includes injection of malicious scripts into pages v...

CVE-2021-46074

Sourcecodester Vehicle Service Management System 1.0 is affected by a Stored Cross-Site Scripting (XSS) vulnerability in the Settings section of the login panel. The vulnerability stems from insufficient validation of client-side data, allowing injected scripts to be stored and potentially execut...

CVE-2021-46076

Sourcecodester Vehicle Service Management System 1.0 is vulnerable to File upload. An attacker can upload a malicious php file in multiple endpoints it leading to Code Execution...

CVE-2021-46080

A Cross Site Request Forgery CSRF vulnerability exists in Vehicle Service Management System 1.0. An successful CSRF attacks leads to Stored Cross Site Scripting Vulnerability...

CVE-2021-46080

A Cross Site Request Forgery CSRF vulnerability exists in Vehicle Service Management System 1.0. An successful CSRF attacks leads to Stored Cross Site Scripting Vulnerability...

CVE-2021-46076

Sourcecodester Vehicle Service Management System 1.0 is vulnerable to File upload. An attacker can upload a malicious php file in multiple endpoints it leading to Code Execution...

Cross site request forgery (csrf)

A Cross Site Request Forgery CSRF vulnerability exists in Vehicle Service Management System 1.0. An successful CSRF attacks leads to Stored Cross Site Scripting Vulnerability...

CVE-2021-46075

The CVE-2021-46075 entry concerns Sourcecodester Vehicle Service Management System 1.0. The vulnerability is a Privilege Escalation where Staff accounts can access admin resources and perform CRUD operations due to insufficient access controls. Reported impact indicates remote-style potential to ...

CVE-2021-46075

A Privilege Escalation vulnerability exists in Sourcecodester Vehicle Service Management System 1.0. Staff account users can access the admin resources and perform CRUD Operations...

CVE-2021-46076

Sourcecodester Vehicle Service Management System 1.0 is vulnerable to File upload. An attacker can upload a malicious php file in multiple endpoints it leading to Code Execution...

CVE-2021-46076

CVE-2021-46076 affects Sourcecodester Vehicle Service Management System 1.0. Multiple connected sources confirm a file upload vulnerability that allows uploading a malicious PHP file to various endpoints, leading to Code Execution. CVSSv3.1 base score 8.8 (HIGH) with NETWORK access, LOW attack co...

CVE-2021-46080

A Cross Site Request Forgery CSRF vulnerability exists in Vehicle Service Management System 1.0. An successful CSRF attacks leads to Stored Cross Site Scripting Vulnerability...

CVE-2021-46080

The CVE-2021-46080 entry refers to Vehicle Service Management System 1.0 and describes a CSRF flaw that enables a stored XSS vulnerability. Public sources (CNVD/CNNVD and NVD) attribute the issue to forged-token validation failures in cross-site requests, leading to stored XSS when an attacker lu...

Sourcecodester Vehicle Service Management System 跨站脚本漏洞

Sourcecodester Vehicle Service Management System is an open source PHP project. A simple Web application for automotive repair/service stores or businesses. sourcecodester Vehicle Service Management System version 1.0 has a cross-site scripting vulnerability that stems from a lack of valid...

Sourcecodester Vehicle Service Management System 跨站脚本漏洞

Sourcecodester Vehicle Service Management System is an open source PHP project. A simple Web application for automotive repair/service stores or businesses. sourcecodester Vehicle Service Management System version 1.0 has a cross-site scripting vulnerability that stems from a lack of valid...