CVE-2021-46074

CVE-2021-46074 漏洞标题：车辆服务管理系统 - 'Settings' 存储型跨站脚本（XSS） 漏洞作者：SANU P.L CVE: CVE-2021-46074 CVSS: 4.8 中危 参考链接： https://www.plsanu.com/vehicle-service-management-system-settings-stored-cross-site-scripting-xss https://nvd.nist.gov/vuln/detail/CVE-2021-46074 https://vulners.com/cve/CVE-2021-46074 描述：...

-CVE-2021-41962

-CVE-2021-41962 Descripción Existe una vulnerabilidad de Cross Site Scripting XSS en Sourcecodester Vehicle Service Management System 1.0 a través del parámetro Owner fullname en un Send Service Request en vehicleservice. Información adicional N/A Tipo de vulnerabilidad Cross Site Scripting XSS...

CVE-2021-46075

CVE-2021-46075 漏洞标题：车辆服务管理系统 - '多个'权限提升导致 CRUD 操作 漏洞作者：SANU P.L CVE：CVE-2021-46075 CVSS：7.2 高危 参考资料： https://www.plsanu.com/vehicle-service-management-system-multiple-privilege-escalation-leads-to-crud-operations https://nvd.nist.gov/vuln/detail/CVE-2021-46075 https://vulners.com/cve/CVE-2021-460...

CVE-2021-46068

CVE-2021-46068 Título del Exploit: Vehicle Service Management System - Cross Site Scripting Almacenado XSS en 'MyAccount' Autor del Exploit: SANU P.L CVE: CVE-2021-46068 CVSS: 4.8 MEDIA Referencias: https://www.plsanu.com/vehicle-service-management-system-myaccount-stored-cross-site-scripting-xss...

CVE-2021-46073

CVE-2021-46073 漏洞利用标题：车辆服务管理系统 - '用户列表' 存储型跨站脚本攻击 XSS 漏洞利用作者：SANU P.L CVE: CVE-2021-46073 CVSS: 4.8 MEDIUM 参考： https://www.plsanu.com/vehicle-service-management-system-user-list-stored-cross-site-scripting-xss https://nvd.nist.gov/vuln/detail/CVE-2021-46073 https://vulners.com/cve/CVE-2021-46073...

CVE-2021-46078

CVE-2021-46078 漏洞利用标题：车辆服务管理系统 - 多处文件上传导致存储型跨站脚本攻击 漏洞利用作者：SANU P.L CVE：CVE-2021-46078 CVSS：4.8 中危 参考来源： https://www.plsanu.com/vehicle-service-management-system-multiple-file-upload-leads-to-stored-cross-site-scripting https://nvd.nist.gov/vuln/detail/CVE-2021-46078...

CVE-2021-46069

CVE-2021-46069 Exploit Title: 车辆服务管理系统 - 'Mechanic List' 存储型跨站脚本 XSS Exploit Author: SANU P.L CVE: CVE-2021-46069 CVSS: 4.8 MEDIUM References: https://www.plsanu.com/vehicle-service-management-system-mechanic-list-stored-cross-site-scripting-xss https://nvd.nist.gov/vuln/detail/CVE-2021-46069...

CVE-2021-46076

CVE-2021-46076 漏洞标题：车辆服务管理系统 - '多处' 文件上传导致代码执行 漏洞作者：SANU P.L CVE：CVE-2021-46076 CVSS：8.8 高危 参考文献： https://www.plsanu.com/vehicle-service-management-system-multiple-file-upload-leads-to-code-execution https://nvd.nist.gov/vuln/detail/CVE-2021-46076 https://vulners.com/cve/CVE-2021-46076 描述：...

CVE-2021-46067

CVE-2021-46067 Título del Exploit: Vehicle Service Management System - 'Múltiple' Robo de Cookies Conduce a la Toma Total de la Cuenta Autor del Exploit: SANU P.L CVE: CVE-2021-46067 CVSS: 9.8 CRÍTICO Referencias:...

CVE-2021-46080

CVE-2021-46080 Título del exploit: Vehicle Service Management System - 'Múltiple' Cross-Site Request Forgery CSRF conduce a Cross Site Scripting Almacenado XSS Autor del exploit: SANU P.L CVE: CVE-2021-46080 CVSS: 4.8 MEDIUM Referencias:...

CVE-2021-46079

CVE-2021-46079 漏洞名称: 车辆服务管理系统 - '多个'文件上传导致HTML注入 漏洞作者: SANU P.L CVE: CVE-2021-46079 CVSS: 7.2 高危 参考: https://www.plsanu.com/vehicle-service-management-system-multiple-file-upload-leads-to-html-injection https://nvd.nist.gov/vuln/detail/CVE-2021-46079 https://vulners.com/cve/CVE-2021-46079 漏洞描述:...

CVE-2021-46070

CVE-2021-46070 漏洞标题：车辆服务管理系统 - '服务请求' 存储型跨站脚本（XSS） 漏洞作者：SANU P.L CVE：CVE-2021-46070 CVSS：4.8 中危 参考链接： https://www.plsanu.com/vehicle-service-management-system-service-requests-stored-cross-site-scripting-xss https://nvd.nist.gov/vuln/detail/CVE-2021-46070 https://vulners.com/cve/CVE-2021-46070 描述...

Vehicle Service Management System - Stored Cross-Site Scripting

A Stored Cross Site Scripting XSS vulnerability exists in Vehicle Service Management System 1.0 via the My Account Section in login panel. id: CVE-2021-46068 info: name: Vehicle Service Management System - Stored Cross-Site Scripting author: TenBird severity: medium description: | A Stored Cross...

Vehicle Service Management System 1.0 - Stored Cross Site Scripting

Vehicle Service Management System 1.0 contains a stored cross-site scripting vulnerability via the Mechanic List section in login panel. id: CVE-2021-46069 info: name: Vehicle Service Management System 1.0 - Stored Cross Site Scripting author: TenBird severity: medium description: | Vehicle Servi...

ehicle Service Management System 1.0 - Cross-Site Scripting

Vehicle Service Management System 1.0 contains a stored cross-site scripting vulnerability via the Category List section in login panel. id: CVE-2021-46071 info: name: ehicle Service Management System 1.0 - Cross-Site Scripting author: TenBird severity: medium description: | Vehicle Service...

Vehicle Service Management System 1.0 - Cross Site Scripting

Vehicle Service Management System 1.0 contains a cross-site scripting vulnerability via the User List section in login panel. id: CVE-2021-46073 info: name: Vehicle Service Management System 1.0 - Cross Site Scripting author: TenBird severity: medium description: | Vehicle Service Management Syst...

Vehicle Service Management System 1.0 - Stored Cross Site Scripting

Vehicle Service Management System 1.0 contains a stored cross-site scripting vulnerability via the Service List section in login panel. id: CVE-2021-46072 info: name: Vehicle Service Management System 1.0 - Stored Cross Site Scripting author: TenBird severity: medium description: | Vehicle Servic...

Vehicle-Service-Management-System-Multiple-Cookie-Stealing-Leads-to-Full-Account-Takeover

CVE-2021-46067 漏洞标题：Vehicle Service Management System - “多个”Cookie 窃取导致完全账户接管 漏洞作者：SANU P.L CVE：CVE-2021-46067 CVSS：9.8 严重 参考链接： https://www.plsanu.com/vehicle-service-management-system-multiple-cookie-stealing-leads-to-full-account-takeover https://nvd.nist.gov/vuln/detail/CVE-2021-46067...

Vehicle-Service-Management-System-Multiple-File-upload-Leads-to-Stored-Cross-Site-Scripting

CVE-2021-46078 Título del Exploit: Vehicle Service Management System - 'Múltiple' Carga de archivos conduce a Cross-Site Scripting Almacenado Autor del Exploit: SANU P.L CVE: CVE-2021-46078 CVSS: 4.8 MEDIO Referencias:...

Vehicle-Service-Management-System-Multiple-File-upload-Leads-to-Code-Execution

CVE-2021-46076 漏洞名称：车辆服务管理系统 - '多处'文件上传导致代码执行 漏洞作者：SANU P.L CVE：CVE-2021-46076 CVSS：8.8 高危 参考链接： https://www.plsanu.com/vehicle-service-management-system-multiple-file-upload-leads-to-code-execution https://nvd.nist.gov/vuln/detail/CVE-2021-46076 https://vulners.com/cve/CVE-2021-46076 描述：...