CVE-2021-39115

CVE-2021-39115 La inyección de plantillas en las plantillas de correo electrónico conduce a la ejecución de código en Jira Service Management Server I Construcción He explicado cómo desplegar y depurar aquí, pueden consultarlo. II Análisis En la Descripción de este CVE ya se indica claramente que...

CVE-2021-46074

CVE-2021-46074 Exploit Title: Vehicle Service Management System - 'Settings' Stored Cross Site Scripting XSS Exploit Author: SANU P.L CVE: CVE-2021-46074 CVSS: 4.8 MEDIUM References: https://www.plsanu.com/vehicle-service-management-system-settings-stored-cross-site-scripting-xss...

CVE-2021-46069

CVE-2021-46069 Exploit Title: 车辆服务管理系统 - 'Mechanic List' 存储型跨站脚本 XSS Exploit Author: SANU P.L CVE: CVE-2021-46069 CVSS: 4.8 MEDIUM References: https://www.plsanu.com/vehicle-service-management-system-mechanic-list-stored-cross-site-scripting-xss https://nvd.nist.gov/vuln/detail/CVE-2021-46069...

CVE-2021-46078

CVE-2021-46078 漏洞利用标题：车辆服务管理系统 - 多处文件上传导致存储型跨站脚本攻击 漏洞利用作者：SANU P.L CVE：CVE-2021-46078 CVSS：4.8 中危 参考来源： https://www.plsanu.com/vehicle-service-management-system-multiple-file-upload-leads-to-stored-cross-site-scripting https://nvd.nist.gov/vuln/detail/CVE-2021-46078...

CVE-2021-46075

CVE-2021-46075 Título del Exploit: Sistema de Gestión de Servicios de Vehículos - 'Múltiples' escaladas de privilegios conducen a operaciones CRUD Autor del Exploit: SANU P.L CVE: CVE-2021-46075 CVSS: 7.2 ALTA Referencias:...

Vehicle-Service-Management-System-Service-List-Stored-Cross-Site-Scripting-XSS

CVE-2021-46072 Título del exploit: Vehicle Service Management System - 'Service List' Cross Site Scripting XSS Almacenado Autor del exploit: SANU P.L CVE: CVE-2021-46072 CVSS: 4.8 MEDIO Referencias:...

CVE-2021-46076

CVE-2021-46076 漏洞标题：车辆服务管理系统 - '多处' 文件上传导致代码执行 漏洞作者：SANU P.L CVE：CVE-2021-46076 CVSS：8.8 高危 参考文献： https://www.plsanu.com/vehicle-service-management-system-multiple-file-upload-leads-to-code-execution https://nvd.nist.gov/vuln/detail/CVE-2021-46076 https://vulners.com/cve/CVE-2021-46076 描述：...

CVE-2021-46068

CVE-2021-46068 Título del Exploit: Vehicle Service Management System - Cross Site Scripting Almacenado XSS en 'MyAccount' Autor del Exploit: SANU P.L CVE: CVE-2021-46068 CVSS: 4.8 MEDIA Referencias: https://www.plsanu.com/vehicle-service-management-system-myaccount-stored-cross-site-scripting-xss...

CVE-2021-46079

CVE-2021-46079 Título del exploit: Vehicle Service Management System - 'Múltiple' carga de archivos conduce a inyección de HTML Autor del exploit: SANU P.L CVE: CVE-2021-46079 CVSS: 7.2 HIGH Referencias:...

CVE-2021-46080

CVE-2021-46080 Título del exploit: Vehicle Service Management System - 'Múltiple' Cross-Site Request Forgery CSRF conduce a Cross Site Scripting Almacenado XSS Autor del exploit: SANU P.L CVE: CVE-2021-46080 CVSS: 4.8 MEDIUM Referencias:...

Vehicle Service Management System - Stored Cross-Site Scripting

A Stored Cross Site Scripting XSS vulnerability exists in Vehicle Service Management System 1.0 via the My Account Section in login panel. id: CVE-2021-46068 info: name: Vehicle Service Management System - Stored Cross-Site Scripting author: TenBird severity: medium description: | A Stored Cross...

Vehicle Service Management System 1.0 - Stored Cross Site Scripting

Vehicle Service Management System 1.0 contains a stored cross-site scripting vulnerability via the Mechanic List section in login panel. id: CVE-2021-46069 info: name: Vehicle Service Management System 1.0 - Stored Cross Site Scripting author: TenBird severity: medium description: | Vehicle Servi...

ehicle Service Management System 1.0 - Cross-Site Scripting

Vehicle Service Management System 1.0 contains a stored cross-site scripting vulnerability via the Category List section in login panel. id: CVE-2021-46071 info: name: ehicle Service Management System 1.0 - Cross-Site Scripting author: TenBird severity: medium description: | Vehicle Service...

Vehicle Service Management System 1.0 - Stored Cross Site Scripting

Vehicle Service Management System 1.0 contains a stored cross-site scripting vulnerability via the Service List section in login panel. id: CVE-2021-46072 info: name: Vehicle Service Management System 1.0 - Stored Cross Site Scripting author: TenBird severity: medium description: | Vehicle Servic...

Vehicle Service Management System 1.0 - Cross Site Scripting

Vehicle Service Management System 1.0 contains a cross-site scripting vulnerability via the User List section in login panel. id: CVE-2021-46073 info: name: Vehicle Service Management System 1.0 - Cross Site Scripting author: TenBird severity: medium description: | Vehicle Service Management Syst...

Vehicle-Service-Management-System-Multiple-Cookie-Stealing-Leads-to-Full-Account-Takeover

CVE-2021-46067 Título del Exploit: Sistema de Gestión de Servicio de Vehículos - 'Múltiple' Robo de Cookies Conduce a la Toma Completa de la Cuenta Autor del Exploit: SANU P.L CVE: CVE-2021-46067 CVSS: 9.8 CRÍTICO Referencias:...

Vehicle-Service-Management-System-Multiple-Privilege-Escalation-Leads-to-CRUD-Operations

CVE-2021-46075 Exploit Title: Vehicle Service Management System - 'Multiple' Privilege Escalation Leads to CRUD Operations Exploit Author: SANU P.L CVE: CVE-2021-46075 CVSS: 7.2 HIGH References:...

Vehicle-Service-Management-System-Multiple-File-upload-Leads-to-Html-Injection

CVE-2021-46079 Título del exploit: Vehicle Service Management System: la carga de archivos 'múltiple' conduce a inyección de HTML Autor del exploit: SANU P.L CVE: CVE-2021-46079 CVSS: 7.2 ALTA Referencias:...

-CVE-2021-41962

-CVE-2021-41962 Descripción Existe una vulnerabilidad de Cross Site Scripting XSS en Sourcecodester Vehicle Service Management System 1.0 a través del parámetro Owner fullname en un Send Service Request en vehicleservice. Información adicional N/A Tipo de vulnerabilidad Cross Site Scripting XSS...

Vehicle-Service-Management-System-MyAccount-Stored-Cross-Site-Scripting-XSS

CVE-2021-46068 Exploit Title: Vehicle Service Management System - 'MyAccount' Stored Cross-Site Scripting XSS Almacenado Exploit Author: SANU P.L CVE: CVE-2021-46068 CVSS: 4.8 MEDIO Referencias: https://www.plsanu.com/vehicle-service-management-system-myaccount-stored-cross-site-scripting-xss...