122 matches found
CVE-2021-46072
CVE-2021-46072 漏洞标题：Vehicle Service Management System - 'Service List' 存储型跨站脚本（XSS） 漏洞作者：SANU P.L CVE编号：CVE-2021-46072 CVSS评分：4.8 中等 参考链接： https://www.plsanu.com/vehicle-service-management-system-service-list-stored-cross-site-scripting-xss https://nvd.nist.gov/vuln/detail/CVE-2021-46072...
CVE-2021-46071
CVE-2021-46071 漏洞标题：车辆服务管理系统 - 'Category List' 存储型跨站脚本 XSS 漏洞作者：SANU P.L CVE编号：CVE-2021-46071 CVSS评分：4.8 中危 参考链接： https://www.plsanu.com/vehicle-service-management-system-category-list-stored-cross-site-scripting-xss https://nvd.nist.gov/vuln/detail/CVE-2021-46071...
CVE-2026-11344-RCE
PHP 製車両管理システム - newdriver.php におけるファイルアップロードを介した未認証のリモートコード実行 脆弱性情報 フィールド| 詳細 ---|--- 製品| Vehicle Management System In PHP ベンダー| code-projects.org バージョン| V1.0 脆弱性タイプ| 無制限ファイルアップロードによるリモートコード実行 CWE-434 影響を受けるファイル| newdriver.php, newvehicle.php パラメータ| photo POST, multipart/form-data 認証の必要性| なし 未認証...
CVE-2026-11344
A vulnerability was found in code-projects Vehicle Management System 1.0. This impacts an unknown function of the file newdriver.php of the component New Driver Registration Form. Performing a manipulation of the argument photo results in unrestricted upload. The attack may be initiated remotely...
CVE-2026-11344
A vulnerability was found in code-projects Vehicle Management System 1.0. This impacts an unknown function of the file newdriver.php of the component New Driver Registration Form. Performing a manipulation of the argument photo results in unrestricted upload. The attack may be initiated remotely...
CVE-2026-11344
CVE-2026-11344 affects the code-projects Vehicle Management System 1.0, specifically the New Driver Registration Form’s file handling in newdriver.php. The vulnerability arises from manipulating the argument photo, leading to an unrestricted upload condition. The flaw is exploitable remotely and ...
CVE-2026-11344 code-projects Vehicle Management System New Driver Registration Form newdriver.php unrestricted upload
A vulnerability was found in code-projects Vehicle Management System 1.0. This impacts an unknown function of the file newdriver.php of the component New Driver Registration Form. Performing a manipulation of the argument photo results in unrestricted upload. The attack may be initiated remotely...
CVE-2026-11344
A vulnerability was found in code-projects Vehicle Management System 1.0. This impacts an unknown function of the file newdriver.php of the component New Driver Registration Form. Performing a manipulation of the argument photo results in unrestricted upload. The attack may be initiated remotely...
EUVD-2026-34865
A vulnerability was found in code-projects Vehicle Management System 1.0. This impacts an unknown function of the file newdriver.php of the component New Driver Registration Form. Performing a manipulation of the argument photo results in unrestricted upload. The attack may be initiated remotely...
CVE-2026-11344 code-projects Vehicle Management System New Driver Registration Form newdriver.php unrestricted upload
A vulnerability was found in code-projects Vehicle Management System 1.0. This impacts an unknown function of the file newdriver.php of the component New Driver Registration Form. Performing a manipulation of the argument photo results in unrestricted upload. The attack may be initiated remotely...
Code-Projects Vehicle Management System 代码问题漏洞
The Code-Projects Vehicle Management System is an open-source vehicle management system developed by Code-Projects. Version 1.0 of the Code-Projects Vehicle Management System has code-related vulnerabilities. These vulnerabilities stem from improper handling of parameters in the newdriver.php fil...
PT-2026-47008
Name of the Vulnerable Software and Affected Versions code-projects Vehicle Management System version 1.0 Description An unrestricted file upload issue exists within the New Driver Registration Form component in the file 'newdriver.php'. A remote attacker can achieve this by manipulating the phot...
CVE-2026-2867
A vulnerability was determined in itsourcecode Vehicle Management System 1.0. Affected is an unknown function of the file /billaction.php. Executing a manipulation of the argument ID can lead to sql injection. The attack may be launched remotely. The exploit has been publicly disclosed and may be...
CVE-2026-2867
A vulnerability was determined in itsourcecode Vehicle Management System 1.0. Affected is an unknown function of the file /billaction.php. Executing a manipulation of the argument ID can lead to sql injection. The attack may be launched remotely. The exploit has been publicly disclosed and may be...
CVE-2026-2867
A vulnerability was determined in itsourcecode Vehicle Management System 1.0. Affected is an unknown function of the file /billaction.php. Executing a manipulation of the argument ID can lead to sql injection. The attack may be launched remotely. The exploit has been publicly disclosed and may be...
CVE-2026-2867
A vulnerability was determined in itsourcecode Vehicle Management System 1.0. Affected is an unknown function of the file /billaction.php. Executing a manipulation of the argument ID can lead to sql injection. The attack may be launched remotely. The exploit has been publicly disclosed and may be...
CVE-2026-2867 itsourcecode Vehicle Management System billaction.php sql injection
A vulnerability was determined in itsourcecode Vehicle Management System 1.0. Affected is an unknown function of the file /billaction.php. Executing a manipulation of the argument ID can lead to sql injection. The attack may be launched remotely. The exploit has been publicly disclosed and may be...
CVE-2026-2867 itsourcecode Vehicle Management System billaction.php sql injection
A vulnerability was determined in itsourcecode Vehicle Management System 1.0. Affected is an unknown function of the file /billaction.php. Executing a manipulation of the argument ID can lead to sql injection. The attack may be launched remotely. The exploit has been publicly disclosed and may be...
PT-2026-21377
Name of the Vulnerable Software and Affected Versions itsourcecode Vehicle Management System version 1.0 Description A SQL injection issue exists in itsourcecode Vehicle Management System. A manipulation of the ID argument in the /billaction.php file can lead to SQL injection. The attack can be...