Vehicle Service Management System - Stored Cross-Site Scripting

A Stored Cross Site Scripting XSS vulnerability exists in Vehicle Service Management System 1.0 via the My Account Section in login panel. id: CVE-2021-46068 info: name: Vehicle Service Management System - Stored Cross-Site Scripting author: TenBird severity: medium description: | A Stored Cross...

ehicle Service Management System 1.0 - Cross-Site Scripting

Vehicle Service Management System 1.0 contains a stored cross-site scripting vulnerability via the Category List section in login panel. id: CVE-2021-46071 info: name: ehicle Service Management System 1.0 - Cross-Site Scripting author: TenBird severity: medium description: | Vehicle Service...

Vehicle Service Management System 1.0 - Stored Cross Site Scripting

Vehicle Service Management System 1.0 contains a stored cross-site scripting vulnerability via the Mechanic List section in login panel. id: CVE-2021-46069 info: name: Vehicle Service Management System 1.0 - Stored Cross Site Scripting author: TenBird severity: medium description: | Vehicle Servi...

Vehicle Service Management System 1.0 - Cross Site Scripting

Vehicle Service Management System 1.0 contains a cross-site scripting vulnerability via the User List section in login panel. id: CVE-2021-46073 info: name: Vehicle Service Management System 1.0 - Cross Site Scripting author: TenBird severity: medium description: | Vehicle Service Management Syst...

Vehicle Service Management System 1.0 - Stored Cross Site Scripting

Vehicle Service Management System 1.0 contains a stored cross-site scripting vulnerability via the Service List section in login panel. id: CVE-2021-46072 info: name: Vehicle Service Management System 1.0 - Stored Cross Site Scripting author: TenBird severity: medium description: | Vehicle Servic...

Vehicle-Service-Management-System-Multiple-Cookie-Stealing-Leads-to-Full-Account-Takeover

CVE-2021-46067 عنوان الاستغلال: Vehicle Service Management System - 'Multiple' Cookie Stealing تؤدي إلى الاستيلاء الكامل على الحساب مؤلف الاستغلال: SANU P.L CVE: CVE-2021-46067 CVSS: 9.8 حرجة المراجع:...

Vehicle-Service-Management-System-Multiple-File-upload-Leads-to-Stored-Cross-Site-Scripting

CVE-2021-46078 Titre de l'exploit : Vehicle Service Management System - Le téléchargement de 'plusieurs' fichiers conduit à un Cross-Site Scripting stocké Auteur de l'exploit : SANU P.L CVE : CVE-2021-46078 CVSS : 4.8 MOYEN Références :...

Vehicle-Service-Management-System-Multiple-File-upload-Leads-to-Code-Execution

CVE-2021-46076 Название эксплойта: Vehicle Service Management System - 'Multiple' Загрузка файла приводит к выполнению кода Автор эксплойта: SANU P.L CVE: CVE-2021-46076 CVSS: 8.8 ВЫСОКИЙ Ссылки: https://www.plsanu.com/vehicle-service-management-system-multiple-file-upload-leads-to-code-execution...

Vehicle-Service-Management-System-User-List-Stored-Cross-Site-Scripting-XSS

CVE-2021-46073 Titre de l'exploit: Vehicle Service Management System - Cross Site Scripting XSS stocké dans la 'Liste des utilisateurs' Auteur de l'exploit: SANU P.L CVE: CVE-2021-46073 CVSS: 4.8 MEDIUM Références:...

Vehicle-Service-Management-System-Settings-Stored-Cross-Site-Scripting-XSS

CVE-2021-46074 Название эксплойта: Vehicle Service Management System - 'Settings' Межсайтовый скриптинг XSS с сохранением Автор эксплойта: САНУ П.Л. CVE: CVE-2021-46074 CVSS: 4.8 СРЕДНИЙ Ссылки: https://www.plsanu.com/vehicle-service-management-system-settings-stored-cross-site-scripting-xss...

Vehicle-Service-Management-System-Service-Requests-Stored-Cross-Site-Scripting-XSS

CVE-2021-46070 Exploit Title: Vehicle Service Management System - 'Service Requests' 저장형 교차 사이트 스크립팅 XSS Exploit Author: SANU P.L CVE: CVE-2021-46070 CVSS: 4.8 MEDIUM 참조: https://www.plsanu.com/vehicle-service-management-system-service-requests-stored-cross-site-scripting-xss...

Vehicle-Service-Management-System-MyAccount-Stored-Cross-Site-Scripting-XSS

CVE-2021-46068 익스플로잇 제목: Vehicle Service Management System - 'MyAccount' 저장형 크로스 사이트 스크립팅 XSS 익스플로잇 작성자: SANU P.L CVE: CVE-2021-46068 CVSS: 4.8 MEDIUM 참고 자료: https://www.plsanu.com/vehicle-service-management-system-myaccount-stored-cross-site-scripting-xss...

Vehicle-Service-Management-System-Multiple-File-upload-Leads-to-Html-Injection

CVE-2021-46079 عنوان الاستغلال: نظام إدارة خدمة المركبات - تحميل ملفات متعدد يؤدي إلى حقن HTML مؤلف الاستغلال: SANU P.L CVE: CVE-2021-46079 CVSS: 7.2 عالية المراجع: https://www.plsanu.com/vehicle-service-management-system-multiple-file-upload-leads-to-html-injection...

Vehicle-Service-Management-System-Category-List-Stored-Cross-Site-Scripting-XSS

CVE-2021-46071 Название эксплойта: Vehicle Service Management System - 'Category List' Хранимый межсайтовый скриптинг XSS Автор эксплойта: SANU P.L CVE: CVE-2021-46071 CVSS: 4.8 СРЕДНИЙ Ссылки: https://www.plsanu.com/vehicle-service-management-system-category-list-stored-cross-site-scripting-xss...

Vehicle-Service-Management-System-Mechanic-List-Stored-Cross-Site-Scripting-XSS

CVE-2021-46069 Titre de l'exploit : Vehicle Service Management System - 'Liste des mécaniciens' Cross Site Scripting stocké XSS Auteur de l'exploit : SANU P.L CVE : CVE-2021-46069 CVSS : 4.8 MEDIUM Références :...

Vehicle-Service-Management-System-Multiple-Privilege-Escalation-Leads-to-CRUD-Operations

CVE-2021-46075 Titre de l'exploit : Vehicle Service Management System - 'Multiple' escalade de privilèges menant à des opérations CRUD Auteur de l'exploit : SANU P.L CVE : CVE-2021-46075 CVSS : 7.2 ÉLEVÉ Références :...

Vehicle-Service-Management-System-Multiple-Cross-Site-Request-Forgery-CSRF-Leads-to-XSS

CVE-2021-46080 عنوان الثغرة: نظام إدارة خدمة المركبات - تزوير طلب عبر المواقع CSRF متعدد يؤدي إلى تخزين البرمجة النصية عبر المواقع XSS مؤلف الثغرة: SANU P.L CVE: CVE-2021-46080 CVSS: 4.8 متوسط المراجع:...

CVE-2021-46074

CVE-2021-46074 Titolo dell'exploit: Vehicle Service Management System - 'Impostazioni' Cross Site Scripting XSS persistente Autore dell'exploit: SANU P.L CVE: CVE-2021-46074 CVSS: 4.8 MEDIO Riferimenti:...

-CVE-2021-41962

-CVE-2021-41962 Descrizione La vulnerabilità Cross Site Scripting XSS esiste in Sourcecodester Vehicle Service Management System 1.0 tramite il parametro Owner fullname in una Send Service Request in vehicleservice. Informazioni aggiuntive N/D Tipo di vulnerabilità Cross Site Scripting XSS...

CVE-2021-46075

CVE-2021-46075 Titolo dell'exploit: Vehicle Service Management System - 'Multiple' Privilege Escalation Leads to CRUD Operations Autore dell'exploit: SANU P.L CVE: CVE-2021-46075 CVSS: 7.2 HIGH Riferimenti:...