CVE-2021-46080: Improper Neutralization of Input During Web Page Generation

A Cross Site Request Forgery CSRF vulnerability exists in Vehicle Service Management System 1.0. An successful CSRF attacks leads to Stored Cross Site Scripting Vulnerability...

CVE-2021-46074: Improper Neutralization of Input During Web Page Generation

A Stored Cross Site Scripting XSS vulnerability exists in Sourcecodester Vehicle Service Management System 1.0 via the Settings Section in login panel...

PT-2022-12553

Name of the Vulnerable Software and Affected Versions Sourcecodester Vehicle Service Management System version 1.0 Description A Privilege Escalation issue exists, allowing staff account users to access admin resources and perform CRUD operations. Recommendations For Sourcecodester Vehicle Servic...

Sourcecodester Vehicle Service Management System 跨站脚本漏洞

Sourcecodester Vehicle Service Management System is an open source PHP project. A simple Web application for automotive repair/service stores or businesses. sourcecodester Vehicle Service Management System version 1.0 has a cross-site scripting vulnerability that stems from a lack of valid...

CVE-2021-46078: Unrestricted Upload of File with Dangerous Type

An Unrestricted File Upload vulnerability exists in Sourcecodester Vehicle Service Management System 1.0. A remote attacker can upload malicious files leading to a Stored Cross-Site Scripting vulnerability...

CVE-2021-46067: Undefined Security Weakness

In Vehicle Service Management System 1.0 an attacker can steal the cookies leading to Full Account Takeover...

PT-2022-12548

Name of the Vulnerable Software and Affected Versions Vehicle Service Management System version 1.0 Description A Stored Cross Site Scripting XSS issue exists via the Service Requests Section in the login panel. This allows for malicious scripts to be stored and executed, potentially affecting...

Sourcecodester Vehicle Service Management System 跨站脚本漏洞

Sourcecodester Vehicle Service Management System is an open source PHP project . Sourcecodester Vehicle Service Management System version 1.0 has a cross-site scripting vulnerability that stems from the system's lack of validation of forged tokens for cross-site requests, and an attack could lead...

CVE-2021-46070: Improper Neutralization of Input During Web Page Generation

A Stored Cross Site Scripting XSS vulnerability exists in Vehicle Service Management System 1.0 via the Service Requests Section in login panel...

PT-2022-12552

Name of the Vulnerable Software and Affected Versions Sourcecodester Vehicle Service Management System version 1.0 Description A Stored Cross Site Scripting XSS issue exists via the Settings Section in the login panel. This allows for malicious scripts to be stored and executed, potentially leadi...

CVE-2021-43951

Affected versions of Atlassian Jira Service Management Server and Data Center allow authenticated remote attackers to view object import configuration details via an Information Disclosure vulnerability in the Create Object type mapping feature. The affected versions are before version 4.21.0...

PT-2022-12546

Name of the Vulnerable Software and Affected Versions Vehicle Service Management System version 1.0 Description A Stored Cross Site Scripting XSS issue exists via the My Account Section in the login panel. This allows for malicious script execution. Recommendations For Vehicle Service Management...

CVE-2021-43949

Affected versions of Atlassian Jira Service Management Server and Data Center allow authenticated remote attackers to view private objects via a Broken Access Control vulnerability in the Custom Fields feature. The affected versions are before version 4.21.0...

CVE-2021-46068: Improper Neutralization of Input During Web Page Generation

A Stored Cross Site Scripting XSS vulnerability exists in Vehicle Service Management System 1.0 via the My Account Section in login panel...

CVE-2021-46072: Improper Neutralization of Input During Web Page Generation

A Stored Cross Site Scripting XSS vulnerability exists in Vehicle Service Management System 1.0 via the Service List Section in login panel...

Sourcecodester Vehicle Service Management System 代码问题漏洞

Sourcecodester Vehicle Service Management System is an open source PHP project. A simple web application for automotive repair/service stores or businesses. Sourcecodester Vehicle Service Management System suffers from a file upload vulnerability that can be exploited by attackers to upload...

Sourcecodester Vehicle Service Management System 跨站脚本漏洞

Sourcecodester Vehicle Service Management System is an open source PHP project. A simple Web application for automotive repair/service stores or businesses. sourcecodester Vehicle Service Management System version 1.0 has a cross-site scripting vulnerability that stems from a lack of valid...

CVE-2021-43950

Affected versions of Atlassian Jira Service Management Server and Data Center allow authenticated remote attackers to view import source configuration information via a Broken Access Control vulnerability in the Insight Import Source feature. The affected versions are before version 4.21.0...

CVE-2021-46071: Improper Neutralization of Input During Web Page Generation

A Stored Cross Site Scripting XSS vulnerability exists in Vehicle Service Management System 1.0 via the Category List Section in login panel...

PT-2022-12557

Name of the Vulnerable Software and Affected Versions Vehicle Service Management System version 1.0 Description A Cross Site Request Forgery CSRF issue exists, which can lead to a Stored Cross Site Scripting vulnerability when a CSRF attack is successful. Recommendations For Vehicle Service...