CVE-2021-46080

CVE-2021-46080 Titolo Exploit: Vehicle Service Management System - 'Multiple' Cross-Site Request Forgery CSRF Porta a Stored Cross Site Scripting XSS Autore Exploit: SANU P.L CVE: CVE-2021-46080 CVSS: 4.8 MEDIO Riferimenti:...

CVE-2021-46069

CVE-2021-46069 Titolo Exploit: Vehicle Service Management System - 'Elenco Meccanici' Stored Cross Site Scripting XSS Autore Exploit: SANU P.L CVE: CVE-2021-46069 CVSS: 4.8 MEDIUM Riferimenti: https://www.plsanu.com/vehicle-service-management-system-mechanic-list-stored-cross-site-scripting-xss...

CVE-2021-46074

CVE-2021-46074 Titolo dell'exploit: Vehicle Service Management System - 'Impostazioni' Cross Site Scripting XSS persistente Autore dell'exploit: SANU P.L CVE: CVE-2021-46074 CVSS: 4.8 MEDIO Riferimenti:...

CVE-2021-46078

CVE-2021-46078 Titolo dell'Exploit: Sistema di Gestione dei Servizi dei Veicoli - Caricamento di più file porta a Cross-Site Scripting Memorizzato Autore dell'Exploit: SANU P.L CVE: CVE-2021-46078 CVSS: 4.8 MEDIUM Riferimenti:...

CVE-2021-46068

CVE-2021-46068 Titolo dell'Exploit: Vehicle Service Management System - 'MyAccount' Cross Site Scripting Memorizzato XSS Autore dell'Exploit: SANU P.L CVE: CVE-2021-46068 CVSS: 4.8 MEDIO Riferimenti: https://www.plsanu.com/vehicle-service-management-system-myaccount-stored-cross-site-scripting-xs...

CVE-2021-46079

CVE-2021-46079 Titolo dell'Exploit: Vehicle Service Management System - 'Multiplo' Caricamento file porta a Iniezione HTML Autore dell'Exploit: SANU P.L CVE: CVE-2021-46079 CVSS: 7.2 ALTO Riferimenti:...

CVE-2021-46076

CVE-2021-46076 Exploit Title: Vehicle Service Management System - Caricamento multiplo di file porta all'esecuzione di codice Exploit Author: SANU P.L CVE: CVE-2021-46076 CVSS: 8.8 HIGH Riferimenti:...

CVE-2021-39115

CVE-2021-39115 Iniezione di template nei modelli email porta all'esecuzione di codice su Jira Service Management Server I Preparazione Ho già guidato il deploy e il debug qui, potete consultarlo. II Analisi Nella Descrizione di questa CVE viene già chiarito che il bug si trova nella funzionalità...

Vehicle-Service-Management-System-Multiple-Cookie-Stealing-Leads-to-Full-Account-Takeover

CVE-2021-46067 Exploit Title: Vehicle Service Management System - 'Múltiplo' Roubo de Cookies Leva à Assunção Total de Conta Exploit Author: SANU P.L CVE: CVE-2021-46067 CVSS: 9.8 CRÍTICO References:...

-CVE-2021-41962

-CVE-2021-41962 विवरण Sourcecodester Vehicle Service Management System 1.0 में vehicleservice में Send Service Request के Owner fullname पैरामीटर के माध्यम से क्रॉस साइट स्क्रिप्टिंग XSS भेद्यता मौजूद है। अतिरिक्त जानकारी NA भेद्यता प्रकार Cross Site Scripting XSS उत्पाद का विक्रेता...

Vehicle Service Management System - Stored Cross-Site Scripting

A Stored Cross Site Scripting XSS vulnerability exists in Vehicle Service Management System 1.0 via the My Account Section in login panel. id: CVE-2021-46068 info: name: Vehicle Service Management System - Stored Cross-Site Scripting author: TenBird severity: medium description: | A Stored Cross...

Vehicle Service Management System 1.0 - Stored Cross Site Scripting

Vehicle Service Management System 1.0 contains a stored cross-site scripting vulnerability via the Mechanic List section in login panel. id: CVE-2021-46069 info: name: Vehicle Service Management System 1.0 - Stored Cross Site Scripting author: TenBird severity: medium description: | Vehicle Servi...

ehicle Service Management System 1.0 - Cross-Site Scripting

Vehicle Service Management System 1.0 contains a stored cross-site scripting vulnerability via the Category List section in login panel. id: CVE-2021-46071 info: name: ehicle Service Management System 1.0 - Cross-Site Scripting author: TenBird severity: medium description: | Vehicle Service...

Vehicle Service Management System 1.0 - Cross Site Scripting

Vehicle Service Management System 1.0 contains a cross-site scripting vulnerability via the User List section in login panel. id: CVE-2021-46073 info: name: Vehicle Service Management System 1.0 - Cross Site Scripting author: TenBird severity: medium description: | Vehicle Service Management Syst...

Vehicle Service Management System 1.0 - Stored Cross Site Scripting

Vehicle Service Management System 1.0 contains a stored cross-site scripting vulnerability via the Service List section in login panel. id: CVE-2021-46072 info: name: Vehicle Service Management System 1.0 - Stored Cross Site Scripting author: TenBird severity: medium description: | Vehicle Servic...

CVE-2021-46075

CVE-2021-46075 عنوان الاستغلال: نظام إدارة خدمات المركبات - 'متعدد' تصعيد الامتيازات يؤدي إلى عمليات CRUD مؤلف الاستغلال: SANU P.L CVE: CVE-2021-46075 CVSS: 7.2 HIGH المراجع: https://www.plsanu.com/vehicle-service-management-system-multiple-privilege-escalation-leads-to-crud-operations...

Vehicle-Service-Management-System-Multiple-File-upload-Leads-to-Stored-Cross-Site-Scripting

CVE-2021-46078 Titolo dell'exploit: Vehicle Service Management System - Caricamento 'multiplo' di file porta a Cross-Site Scripting persistente Autore dell'exploit: SANU P.L CVE: CVE-2021-46078 CVSS: 4.8 MEDIUM Riferimenti:...

Vehicle-Service-Management-System-Multiple-File-upload-Leads-to-Code-Execution

CVE-2021-46076 Título do Exploit: Vehicle Service Management System - 'Multiple' upload de arquivos leva à Execução de Código Autor do Exploit: SANU P.L CVE: CVE-2021-46076 CVSS: 8.8 ALTO Referências:...

Vehicle-Service-Management-System-User-List-Stored-Cross-Site-Scripting-XSS

CVE-2021-46073 Exploit-Titel: Vehicle Service Management System - 'User List' Stored Cross Site Scripting XSS Exploit-Autor: SANU P.L CVE: CVE-2021-46073 CVSS: 4.8 MEDIUM Referenzen: https://www.plsanu.com/vehicle-service-management-system-user-list-stored-cross-site-scripting-xss...

Vehicle-Service-Management-System-Settings-Stored-Cross-Site-Scripting-XSS

CVE-2021-46074 Exploit-Titel: Vehicle Service Management System - 'Einstellungen' Stored Cross Site Scripting XSS Exploit-Autor: SANU P.L CVE: CVE-2021-46074 CVSS: 4.8 MITTEL Referenzen: https://www.plsanu.com/vehicle-service-management-system-settings-stored-cross-site-scripting-xss...