Sourcecodester Vehicle Service Management System Cross-Site Scripting Vulnerability (CNVD-2022-02639)

Sourcecodester Vehicle Service Management System is an open source PHP project. A simple Web application for automotive repair/service stores or businesses. sourcecodester Vehicle Service Management System version 1.0 has a cross-site scripting vulnerability that stems from a lack of valid...

Sourcecodester Vehicle Service Management System Cross-Site Scripting Vulnerability (CNVD-2022-02640)

Sourcecodester Vehicle Service Management System is an open source PHP project. A simple Web application for automotive repair/service stores or businesses. Sourcecodester Vehicle Service Management System version 1.0 has a cross-site scripting vulnerability that stems from the vulnerability stem...

Privilege escalation

A Privilege Escalation vulnerability exists in Sourcecodester Vehicle Service Management System 1.0. Staff account users can access the admin resources and perform CRUD Operations...

Unrestricted file upload

An Unrestricted File Upload vulnerability exists in Sourcecodester Vehicle Service Management System 1.0. A remote attacker can upload malicious files leading to Html Injection...

CVE-2021-46079

An Unrestricted File Upload vulnerability exists in Sourcecodester Vehicle Service Management System 1.0. A remote attacker can upload malicious files leading to Html Injection...

CVE-2021-46073

Vehicle Service Management System 1.0 contains a Cross-Site Scripting (XSS) vulnerability in the User List section of the login panel. The root cause is insufficient input filtering/escaping in that area, enabling stored XSS. Impact per sources includes injection of malicious scripts into pages v...

CVE-2021-46076

Sourcecodester Vehicle Service Management System 1.0 is vulnerable to File upload. An attacker can upload a malicious php file in multiple endpoints it leading to Code Execution...

Unrestricted file upload

Sourcecodester Vehicle Service Management System 1.0 is vulnerable to File upload. An attacker can upload a malicious php file in multiple endpoints it leading to Code Execution...

CVE-2021-46076

Sourcecodester Vehicle Service Management System 1.0 is vulnerable to File upload. An attacker can upload a malicious php file in multiple endpoints it leading to Code Execution...

CVE-2021-46079: Unrestricted Upload of File with Dangerous Type

An Unrestricted File Upload vulnerability exists in Sourcecodester Vehicle Service Management System 1.0. A remote attacker can upload malicious files leading to Html Injection...

CVE-2021-46076: Unrestricted Upload of File with Dangerous Type

Sourcecodester Vehicle Service Management System 1.0 is vulnerable to File upload. An attacker can upload a malicious php file in multiple endpoints it leading to Code Execution...

PT-2022-12552

Name of the Vulnerable Software and Affected Versions Sourcecodester Vehicle Service Management System version 1.0 Description A Stored Cross Site Scripting XSS issue exists via the Settings Section in the login panel. This allows for malicious scripts to be stored and executed, potentially leadi...

PT-2022-12556

Name of the Vulnerable Software and Affected Versions Sourcecodester Vehicle Service Management System version 1.0 Description An Unrestricted File Upload issue exists, allowing a remote attacker to upload malicious files, which can lead to Html Injection. Recommendations For Sourcecodester Vehic...

PT-2022-12551

Name of the Vulnerable Software and Affected Versions Sourcecodester Vehicle Service Management System version 1.0 Description A Stored Cross Site Scripting XSS issue exists via the User List Section in the login panel. This allows for malicious scripts to be stored and executed, potentially...

PT-2022-12554

Name of the Vulnerable Software and Affected Versions Sourcecodester Vehicle Service Management System version 1.0 Description The issue allows an attacker to upload a malicious php file in multiple endpoints, leading to Code Execution. Recommendations For Sourcecodester Vehicle Service Managemen...

CVE-2021-46074: Improper Neutralization of Input During Web Page Generation

A Stored Cross Site Scripting XSS vulnerability exists in Sourcecodester Vehicle Service Management System 1.0 via the Settings Section in login panel...

CVE-2021-46073: Improper Neutralization of Input During Web Page Generation

A Stored Cross Site Scripting XSS vulnerability exists in Sourcecodester Vehicle Service Management System 1.0 via the User List Section in login panel...

CVE-2021-46075: Missing Authorization

A Privilege Escalation vulnerability exists in Sourcecodester Vehicle Service Management System 1.0. Staff account users can access the admin resources and perform CRUD Operations...

PT-2022-12553

Name of the Vulnerable Software and Affected Versions Sourcecodester Vehicle Service Management System version 1.0 Description A Privilege Escalation issue exists, allowing staff account users to access admin resources and perform CRUD operations. Recommendations For Sourcecodester Vehicle Servic...

PT-2022-12555

Name of the Vulnerable Software and Affected Versions Sourcecodester Vehicle Service Management System version 1.0 Description An Unrestricted File Upload issue exists, allowing a remote attacker to upload malicious files. This can lead to a Stored Cross-Site Scripting issue. Recommendations For...