Vehicle-Service-Management-System-Settings-Stored-Cross-Site-Scripting-XSS

CVE-2021-46074 エクスプロイトのタイトル: Vehicle Service Management System - '設定' 保存型クロスサイトスクリプティング XSS エクスプロイト作成者: SANU P.L CVE: CVE-2021-46074 CVSS: 4.8 MEDIUM 参考文献: https://www.plsanu.com/vehicle-service-management-system-settings-stored-cross-site-scripting-xss...

CVE-2021-46074

creationtimestamp| type| source ---|---|--- 2022-01-06 18:41:16+00:00| seen| https://t.me/cibsecurity/35061 2022-01-14 20:05:24+00:00| published-proof-of-concept| https://t.me/GithubRedTeam/1331...

CVE-2021-46074

Sourcecodester Vehicle Service Management System 1.0 is affected by a Stored Cross-Site Scripting (XSS) vulnerability in the Settings section of the login panel. The vulnerability stems from insufficient validation of client-side data, allowing injected scripts to be stored and potentially execut...