Vehicle-Service-Management-System-Service-List-Stored-Cross-Site-Scripting-XSS

CVE-2021-46072 Exploit 标题：Vehicle Service Management System - 'Service List' 存储型跨站脚本（XSS） Exploit 作者：SANU P.L CVE：CVE-2021-46072 CVSS：4.8 中危 参考： https://www.plsanu.com/vehicle-service-management-system-service-list-stored-cross-site-scripting-xss https://nvd.nist.gov/vuln/detail/CVE-2021-46072...

CVE-2021-46072

creationtimestamp| type| source ---|---|--- 2022-01-06 18:41:23+00:00| seen| https://t.me/cibsecurity/35065 2022-01-14 19:31:30+00:00| published-proof-of-concept| https://t.me/GithubRedTeam/1328 2022-01-14 19:39:56+00:00| published-proof-of-concept| https://t.me/GithubRedTeam/1329 2023-04-27...

CVE-2021-46072

A Stored Cross Site Scripting XSS vulnerability exists in Vehicle Service Management System 1.0 via the Service List Section in login panel...

CVE-2021-46072

CVE-2021-46072 affects Vehicle Service Management System 1.0, with a stored cross-site scripting (XSS) vulnerability in the Service List section of the login panel. The issue arises from insufficient input filtering/escaping, enabling attacker-supplied payloads to be stored and later executed by ...