Vehicle-Service-Management-System-Service-List-Stored-Cross-Site-Scripting-XSS

CVE-2021-46072 Titolo Exploit: Vehicle Service Management System - 'Service List' Cross Site Scripting XSS Memorizzato Autore Exploit: SANU P.L CVE: CVE-2021-46072 CVSS: 4.8 MEDIUM Riferimenti: https://www.plsanu.com/vehicle-service-management-system-service-list-stored-cross-site-scripting-xss...

CVE-2021-46075

CVE-2021-46075 Titolo dell'exploit: Vehicle Service Management System - 'Multiple' Privilege Escalation Leads to CRUD Operations Autore dell'exploit: SANU P.L CVE: CVE-2021-46075 CVSS: 7.2 HIGH Riferimenti:...

CVE-2021-46068

CVE-2021-46068 Titolo dell'Exploit: Vehicle Service Management System - 'MyAccount' Cross Site Scripting Memorizzato XSS Autore dell'Exploit: SANU P.L CVE: CVE-2021-46068 CVSS: 4.8 MEDIO Riferimenti: https://www.plsanu.com/vehicle-service-management-system-myaccount-stored-cross-site-scripting-xs...

CVE-2021-46078

CVE-2021-46078 Exploit Title: Vehicle Service Management System - 'Mehrere' Datei-Uploads führen zu Stored Cross-Site Scripting Exploit Author: SANU P.L CVE: CVE-2021-46078 CVSS: 4.8 MEDIUM Referenzen:...

CVE-2021-46069

CVE-2021-46069 Titolo Exploit: Vehicle Service Management System - 'Elenco Meccanici' Stored Cross Site Scripting XSS Autore Exploit: SANU P.L CVE: CVE-2021-46069 CVSS: 4.8 MEDIUM Riferimenti: https://www.plsanu.com/vehicle-service-management-system-mechanic-list-stored-cross-site-scripting-xss...

CVE-2021-46076

CVE-2021-46076 Exploit Title: Vehicle Service Management System - Caricamento multiplo di file porta all'esecuzione di codice Exploit Author: SANU P.L CVE: CVE-2021-46076 CVSS: 8.8 HIGH Riferimenti:...

CVE-2021-46080

CVE-2021-46080 Exploit-Titel: Vehicle Service Management System – „Mehrere“ Cross-Site-Request-Forgery CSRF führen zu Stored Cross-Site-Scripting XSS Exploit-Autor: SANU P.L CVE: CVE-2021-46080 CVSS: 4.8 MEDIUM Referenzen:...

CVE-2021-46079

CVE-2021-46079 Titolo dell'Exploit: Vehicle Service Management System - 'Multiplo' Caricamento file porta a Iniezione HTML Autore dell'Exploit: SANU P.L CVE: CVE-2021-46079 CVSS: 7.2 ALTO Riferimenti:...

CVE-2026-39975

Combodo iTop is a web-based IT service management tool. Prior to 3.2.3, unauthenticated users could delete the .readonly file on iTop instances, leading to code execution. This file, created during the setup process, prevents users from performing write actions. This issue has been fixed in versi...

CVE-2026-30864

Combodo iTop is a web-based IT service management tool. Prior to 3.2.3, iTop is vulnerable to Reflected Cross-Site Scripting XSS in the dashboard revert functionality. This issue has been fixed in version 3.2.3...

CVE-2026-30864 Combodo iTop: Reflected XSS in dashboard revert

Combodo iTop is a web-based IT service management tool. Prior to 3.2.3, iTop is vulnerable to Reflected Cross-Site Scripting XSS in the dashboard revert functionality. This issue has been fixed in version 3.2.3...

CVE-2026-30864

Combodo iTop versions prior to 3.2.3 are susceptible to a Reflected Cross-Site Scripting (XSS) vulnerability in the dashboard revert functionality . An authenticated attacker (low privileges) can craft a malicious URL that, when clicked by a victim, executes arbitrary script in the victim's brows...

CVE-2026-30864 Combodo iTop: Reflected XSS in dashboard revert

Combodo iTop is a web-based IT service management tool. Prior to 3.2.3, iTop is vulnerable to Reflected Cross-Site Scripting XSS in the dashboard revert functionality. This issue has been fixed in version 3.2.3...

PT-2026-80995

Name of the Vulnerable Software and Affected Versions Combodo iTop versions prior to 3.2.3 Description Combodo iTop is a web-based IT service management tool. The software contains a Reflected Cross-Site Scripting XSS flaw within the dashboard revert functionality. Reflected XSS occurs when an...

CVE-2026-34948

Combodo iTop is a web based IT service management tool. Prior to 3.2.3, only classes present in the SELECT clause are protected by the silos access check in OQL. This issue has been fixed in version 3.2.3...

CVE-2026-34949

Combodo iTop is a web based IT service management tool.Prior to 3.2.3, an unauthenticated user could delete the .readonly file on iTop instances — a file created during the setup process that prevents users from performing write actions. This issue has been fixed in version 3.2.3...

CVE-2026-34949 Combodo iTop: Unauthenticated user can delete .readonly file

Combodo iTop is a web based IT service management tool.Prior to 3.2.3, an unauthenticated user could delete the .readonly file on iTop instances — a file created during the setup process that prevents users from performing write actions. This issue has been fixed in version 3.2.3...

CVE-2026-34949 Combodo iTop: Unauthenticated user can delete .readonly file

Combodo iTop is a web based IT service management tool.Prior to 3.2.3, an unauthenticated user could delete the .readonly file on iTop instances — a file created during the setup process that prevents users from performing write actions. This issue has been fixed in version 3.2.3...

EUVD-2026-64187

Combodo iTop is a web based IT service management tool. Prior to 3.2.3, only classes present in the SELECT clause are protected by the silos access check in OQL. This issue has been fixed in version 3.2.3...

CVE-2026-34948

Combodo iTop versions prior to 3.2.3 are affected by an access control bypass in its OQL (Object Query Language) engine. The root cause is that the silos access check only applies to classes present in the SELECT clause , leaving classes referenced via JOINs unprotected. This allows an authentica...