Unrestricted file upload

An Unrestricted File Upload vulnerability exists in Sourcecodester Vehicle Service Management System 1.0. A remote attacker can upload malicious files leading to a Stored Cross-Site Scripting vulnerability...

Code injection

In Vehicle Service Management System 1.0 an attacker can steal the cookies leading to Full Account Takeover...

Unrestricted file upload

An Unrestricted File Upload vulnerability exists in Sourcecodester Vehicle Service Management System 1.0. A remote attacker can upload malicious files leading to Html Injection...

Cross site scripting

A Stored Cross Site Scripting XSS vulnerability exists in Vehicle Service Management System 1.0 via the Service Requests Section in login panel...

CVE-2021-46079

CVE-2021-46079 affects Sourcecodester Vehicle Service Management System 1.0. The vulnerability is an unrestricted file upload that enables a remote attacker to upload malicious files, leading to HTML injection . Multiple sources (NVD, Red Hat, CVE lists) corroborate this description. The availabl...

CVE-2021-46079

An Unrestricted File Upload vulnerability exists in Sourcecodester Vehicle Service Management System 1.0. A remote attacker can upload malicious files leading to Html Injection...

CVE-2021-46078

Sourcecodester Vehicle Service Management System 1.0 has an Unrestricted File Upload vulnerability that can allow a remote attacker to upload malicious files, leading to Stored Cross-Site Scripting. Multiple sources (NVD, Red Hat, CNVD, CVE listing) confirm the issue and its impact as stored XSS,...

CVE-2021-46078

An Unrestricted File Upload vulnerability exists in Sourcecodester Vehicle Service Management System 1.0. A remote attacker can upload malicious files leading to a Stored Cross-Site Scripting vulnerability...

CVE-2021-46068

A Stored Cross Site Scripting XSS vulnerability exists in Vehicle Service Management System 1.0 via the My Account Section in login panel...

CVE-2021-46068

The CVE-2021-46068 issue affects Vehicle Service Management System 1.0, specifically a Stored Cross‑Site Scripting (XSS) vulnerability in the My Account section of the login panel. Exploitation could allow attackers to inject malicious scripts into the application and, as described in connected s...

CVE-2021-46067

The provided documents confirm CVE-2021-46067 affects Vehicle Service Management System (VSMS) 1.0, where an attacker can steal cookies to achieve full account takeover. The root cause cited across sources is lack of proper protection against cookies, enabling cookie theft. Public references desc...

CVE-2021-46067

In Vehicle Service Management System 1.0 an attacker can steal the cookies leading to Full Account Takeover...

CVE-2021-46069

CVE-2021-46069 affects Vehicle Service Management System 1.0. The vulnerability is a Stored Cross-Site Scripting (XSS) via the Mechanic List section in the login panel, caused by insufficient input validation/escaping. Several connected sources (NVD, CNVD, nuclei template) confirm the issue and i...

CVE-2021-46069

A Stored Cross Site Scripting XSS vulnerability exists in Vehicle Service Management System 1.0 via the Mechanic List Section in login panel...

CVE-2021-46070

The CVE-2021-46070 entry corresponds to a stored XSS vulnerability in Sourcecodester Vehicle Service Management System 1.0. Multiple connected sources (CNVD-2022-02641 and CNVD/ CNNVD records) describe that the issue arises in the login panel’s Service Requests portion due to a lack of proper inp...

CVE-2021-46071

A Stored Cross Site Scripting XSS vulnerability exists in Vehicle Service Management System 1.0 via the Category List Section in login panel...

CVE-2021-46071

CVE-2021-46071 affects Vehicle Service Management System 1.0. It is a stored XSS via the Category List section in the login panel, caused by insufficient input validation/escaping. Impact stated: injection of malicious scripts into pages viewed by users, with potential data theft, session hijacki...

CVE-2021-46072

A Stored Cross Site Scripting XSS vulnerability exists in Vehicle Service Management System 1.0 via the Service List Section in login panel...

CVE-2021-46072

CVE-2021-46072 affects Vehicle Service Management System 1.0, with a stored cross-site scripting (XSS) vulnerability in the Service List section of the login panel. The issue arises from insufficient input filtering/escaping, enabling attacker-supplied payloads to be stored and later executed by ...

CVE-2021-46073

Vehicle Service Management System 1.0 contains a Cross-Site Scripting (XSS) vulnerability in the User List section of the login panel. The root cause is insufficient input filtering/escaping in that area, enabling stored XSS. Impact per sources includes injection of malicious scripts into pages v...