5 matches found
ehicle Service Management System 1.0 - Cross-Site Scripting
Vehicle Service Management System 1.0 contains a stored cross-site scripting vulnerability via the Category List section in login panel. id: CVE-2021-46071 info: name: ehicle Service Management System 1.0 - Cross-Site Scripting author: TenBird severity: medium description: | Vehicle Service...
Vehicle-Service-Management-System-Category-List-Stored-Cross-Site-Scripting-XSS
CVE-2021-46071 Exploit Title: Vehicle Service Management System - 'Category List' Stored Cross Site Scripting XSS Exploit Author: SANU P.L CVE: CVE-2021-46071 CVSS: 4.8 MEDIUM References: https://www.plsanu.com/vehicle-service-management-system-category-list-stored-cross-site-scripting-xss...
CVE-2021-46071
A Stored Cross Site Scripting XSS vulnerability exists in Vehicle Service Management System 1.0 via the Category List Section in login panel...
CVE-2021-46071
CVE-2021-46071 affects Vehicle Service Management System 1.0. It is a stored XSS via the Category List section in the login panel, caused by insufficient input validation/escaping. Impact stated: injection of malicious scripts into pages viewed by users, with potential data theft, session hijacki...