CVE-2021-39115

CVE-2021-39115 Template Injection in Email Templates leads to code execution on Jira Service Management Server I Building I have provided a guide for deployment + debug here, you can refer to it. II Analysis The Description of this CVE already clearly states that the bug lies in the Email Templat...

CVE-2021-46078

CVE-2021-46078 Titre de l'exploit : Vehicle Service Management System - 'Multiple' téléchargement de fichiers menant à un Cross-Site Scripting stocké Auteur de l'exploit : SANU P.L CVE: CVE-2021-46078 CVSS: 4.8 MOYEN Références:...

CVE-2021-46075

CVE-2021-46075 Exploit-Titel: Vehicle Service Management System - 'Mehrere' Privilegieneskalation führt zu CRUD-Operationen Exploit-Autor: SANU P.L CVE: CVE-2021-46075 CVSS: 7.2 HOCH Referenzen:...

CVE-2021-46069

CVE-2021-46069 Titre de l'exploit : Vehicle Service Management System - 'Mechanic List' Stored Cross Site Scripting XSS Auteur de l'exploit : SANU P.L CVE: CVE-2021-46069 CVSS: 4.8 MEDIUM Références :...

CVE-2021-46076

CVE-2021-46076 Exploit Title: Vehicle Service Management System - 'Multiple' File upload Leads to Code Execution Exploit Author: SANU P.L CVE: CVE-2021-46076 CVSS: 8.8 HIGH References: https://www.plsanu.com/vehicle-service-management-system-multiple-file-upload-leads-to-code-execution...

CVE-2021-46080

CVE-2021-46080 Exploit Title: वाहन सेवा प्रबंधन प्रणाली - 'एकाधिक' क्रॉस-साइट रिक्वेस्ट फोर्जरी CSRF संग्रहीत क्रॉस-साइट स्क्रिप्टिंग XSS की ओर ले जाता है Exploit Author: SANU P.L CVE: CVE-2021-46080 CVSS: 4.8 मध्यम संदर्भ:...

CVE-2021-46074

CVE-2021-46074 Título do Exploit: Vehicle Service Management System - Cross Site Scripting XSS Armazenado em 'Configurações' Autor do Exploit: SANU P.L CVE: CVE-2021-46074 CVSS: 4.8 MÉDIO Referências: https://www.plsanu.com/vehicle-service-management-system-settings-stored-cross-site-scripting-xs...

CVE-2021-46068

CVE-2021-46068 Exploit-Titel: Vehicle Service Management System - 'MyAccount' Stored Cross Site Scripting XSS Exploit-Autor: SANU P.L CVE: CVE-2021-46068 CVSS: 4.8 MITTEL Referenzen: https://www.plsanu.com/vehicle-service-management-system-myaccount-stored-cross-site-scripting-xss...

CVE-2021-46079

CVE-2021-46079 Titolo dell'Exploit: Vehicle Service Management System - 'Multiplo' Caricamento file porta a Iniezione HTML Autore dell'Exploit: SANU P.L CVE: CVE-2021-46079 CVSS: 7.2 ALTO Riferimenti:...

Vehicle Service Management System - Stored Cross-Site Scripting

A Stored Cross Site Scripting XSS vulnerability exists in Vehicle Service Management System 1.0 via the My Account Section in login panel. id: CVE-2021-46068 info: name: Vehicle Service Management System - Stored Cross-Site Scripting author: TenBird severity: medium description: | A Stored Cross...

Vehicle Service Management System 1.0 - Stored Cross Site Scripting

Vehicle Service Management System 1.0 contains a stored cross-site scripting vulnerability via the Mechanic List section in login panel. id: CVE-2021-46069 info: name: Vehicle Service Management System 1.0 - Stored Cross Site Scripting author: TenBird severity: medium description: | Vehicle Servi...

ehicle Service Management System 1.0 - Cross-Site Scripting

Vehicle Service Management System 1.0 contains a stored cross-site scripting vulnerability via the Category List section in login panel. id: CVE-2021-46071 info: name: ehicle Service Management System 1.0 - Cross-Site Scripting author: TenBird severity: medium description: | Vehicle Service...

Vehicle Service Management System 1.0 - Cross Site Scripting

Vehicle Service Management System 1.0 contains a cross-site scripting vulnerability via the User List section in login panel. id: CVE-2021-46073 info: name: Vehicle Service Management System 1.0 - Cross Site Scripting author: TenBird severity: medium description: | Vehicle Service Management Syst...

Vehicle Service Management System 1.0 - Stored Cross Site Scripting

Vehicle Service Management System 1.0 contains a stored cross-site scripting vulnerability via the Service List section in login panel. id: CVE-2021-46072 info: name: Vehicle Service Management System 1.0 - Stored Cross Site Scripting author: TenBird severity: medium description: | Vehicle Servic...

Vehicle-Service-Management-System-Multiple-Cookie-Stealing-Leads-to-Full-Account-Takeover

CVE-2021-46067 Exploit Title: Vehicle Service Management System - 'Múltiplo' Roubo de Cookies Leva à Assunção Total de Conta Exploit Author: SANU P.L CVE: CVE-2021-46067 CVSS: 9.8 CRÍTICO References:...

-CVE-2021-41962

-CVE-2021-41962 विवरण Sourcecodester Vehicle Service Management System 1.0 में vehicleservice में Send Service Request के Owner fullname पैरामीटर के माध्यम से क्रॉस साइट स्क्रिप्टिंग XSS भेद्यता मौजूद है। अतिरिक्त जानकारी NA भेद्यता प्रकार Cross Site Scripting XSS उत्पाद का विक्रेता...

Vehicle-Service-Management-System-Multiple-File-upload-Leads-to-Stored-Cross-Site-Scripting

CVE-2021-46078 Titolo dell'exploit: Vehicle Service Management System - Caricamento 'multiplo' di file porta a Cross-Site Scripting persistente Autore dell'exploit: SANU P.L CVE: CVE-2021-46078 CVSS: 4.8 MEDIUM Riferimenti:...

Vehicle-Service-Management-System-Multiple-File-upload-Leads-to-Code-Execution

CVE-2021-46076 Título do Exploit: Vehicle Service Management System - 'Multiple' upload de arquivos leva à Execução de Código Autor do Exploit: SANU P.L CVE: CVE-2021-46076 CVSS: 8.8 ALTO Referências:...

Vehicle-Service-Management-System-User-List-Stored-Cross-Site-Scripting-XSS

CVE-2021-46073 Exploit-Titel: Vehicle Service Management System - 'User List' Stored Cross Site Scripting XSS Exploit-Autor: SANU P.L CVE: CVE-2021-46073 CVSS: 4.8 MEDIUM Referenzen: https://www.plsanu.com/vehicle-service-management-system-user-list-stored-cross-site-scripting-xss...

Vehicle-Service-Management-System-Settings-Stored-Cross-Site-Scripting-XSS

CVE-2021-46074 Exploit-Titel: Vehicle Service Management System - 'Einstellungen' Stored Cross Site Scripting XSS Exploit-Autor: SANU P.L CVE: CVE-2021-46074 CVSS: 4.8 MITTEL Referenzen: https://www.plsanu.com/vehicle-service-management-system-settings-stored-cross-site-scripting-xss...