CVE-2021-46076

Sourcecodester Vehicle Service Management System 1.0 is vulnerable to File upload. An attacker can upload a malicious php file in multiple endpoints it leading to Code Execution...

CVE-2021-46076

CVE-2021-46076 affects Sourcecodester Vehicle Service Management System 1.0. Multiple connected sources confirm a file upload vulnerability that allows uploading a malicious PHP file to various endpoints, leading to Code Execution. CVSSv3.1 base score 8.8 (HIGH) with NETWORK access, LOW attack co...

CVE-2021-46080

A Cross Site Request Forgery CSRF vulnerability exists in Vehicle Service Management System 1.0. An successful CSRF attacks leads to Stored Cross Site Scripting Vulnerability...

CVE-2021-46080

The CVE-2021-46080 entry refers to Vehicle Service Management System 1.0 and describes a CSRF flaw that enables a stored XSS vulnerability. Public sources (CNVD/CNNVD and NVD) attribute the issue to forged-token validation failures in cross-site requests, leading to stored XSS when an attacker lu...

CVE-2021-46076: Unrestricted Upload of File with Dangerous Type

Sourcecodester Vehicle Service Management System 1.0 is vulnerable to File upload. An attacker can upload a malicious php file in multiple endpoints it leading to Code Execution...

Sourcecodester Vehicle Service Management System 代码问题漏洞

Sourcecodester Vehicle Service Management System is an open source PHP project. A simple web application for automotive repair/service stores or businesses. Sourcecodester Vehicle Service Management System has a security vulnerability that arises from improper design or implementation of the code...

CVE-2021-46067: Undefined Security Weakness

In Vehicle Service Management System 1.0 an attacker can steal the cookies leading to Full Account Takeover...

PT-2022-12547

Name of the Vulnerable Software and Affected Versions Vehicle Service Management System version 1.0 Description A Stored Cross Site Scripting XSS issue exists via the Mechanic List Section in the login panel. Recommendations For version 1.0, consider disabling access to the Mechanic List Section ...

PT-2022-12549

Name of the Vulnerable Software and Affected Versions Vehicle Service Management System version 1.0 Description A Stored Cross Site Scripting XSS issue exists via the Category List Section in the login panel. This allows for malicious scripts to be stored and executed, potentially leading to...

PT-2022-12550

Name of the Vulnerable Software and Affected Versions Vehicle Service Management System version 1.0 Description A Stored Cross Site Scripting XSS issue exists via the Service List Section in the login panel. This allows for malicious scripts to be stored and executed, potentially leading to...

CVE-2021-46073: Improper Neutralization of Input During Web Page Generation

A Stored Cross Site Scripting XSS vulnerability exists in Sourcecodester Vehicle Service Management System 1.0 via the User List Section in login panel...

PT-2022-12556

Name of the Vulnerable Software and Affected Versions Sourcecodester Vehicle Service Management System version 1.0 Description An Unrestricted File Upload issue exists, allowing a remote attacker to upload malicious files, which can lead to Html Injection. Recommendations For Sourcecodester Vehic...

PT-2022-12551

Name of the Vulnerable Software and Affected Versions Sourcecodester Vehicle Service Management System version 1.0 Description A Stored Cross Site Scripting XSS issue exists via the User List Section in the login panel. This allows for malicious scripts to be stored and executed, potentially...

Sourcecodester Vehicle Service Management System 代码问题漏洞

Sourcecodester Vehicle Service Management System is an open source PHP project. A simple web application for automotive repair/service stores or businesses. Sourcecodester Vehicle Service Management System suffers from a file upload vulnerability that can be exploited by attackers to upload...

PT-2022-12555

Name of the Vulnerable Software and Affected Versions Sourcecodester Vehicle Service Management System version 1.0 Description An Unrestricted File Upload issue exists, allowing a remote attacker to upload malicious files. This can lead to a Stored Cross-Site Scripting issue. Recommendations For...

CVE-2021-46069: Improper Neutralization of Input During Web Page Generation

A Stored Cross Site Scripting XSS vulnerability exists in Vehicle Service Management System 1.0 via the Mechanic List Section in login panel...

PT-2022-12557

Name of the Vulnerable Software and Affected Versions Vehicle Service Management System version 1.0 Description A Cross Site Request Forgery CSRF issue exists, which can lead to a Stored Cross Site Scripting vulnerability when a CSRF attack is successful. Recommendations For Vehicle Service...

Sourcecodester Vehicle Service Management System 跨站脚本漏洞

Sourcecodester Vehicle Service Management System is an open source PHP project. A simple Web application for automotive repair/service stores or businesses. sourcecodester Vehicle Service Management System version 1.0 has a cross-site scripting vulnerability that stems from a lack of valid...

PT-2022-12545

Name of the Vulnerable Software and Affected Versions Vehicle Service Management System version 1.0 Description The issue allows an attacker to steal cookies, leading to Full Account Takeover. Recommendations For Vehicle Service Management System version 1.0, consider implementing additional...

CVE-2021-46079: Unrestricted Upload of File with Dangerous Type

An Unrestricted File Upload vulnerability exists in Sourcecodester Vehicle Service Management System 1.0. A remote attacker can upload malicious files leading to Html Injection...