Vehicle Service Management System - Stored Cross-Site Scripting

A Stored Cross Site Scripting XSS vulnerability exists in Vehicle Service Management System 1.0 via the My Account Section in login panel. id: CVE-2021-46068 info: name: Vehicle Service Management System - Stored Cross-Site Scripting author: TenBird severity: medium description: | A Stored Cross...

ehicle Service Management System 1.0 - Cross-Site Scripting

Vehicle Service Management System 1.0 contains a stored cross-site scripting vulnerability via the Category List section in login panel. id: CVE-2021-46071 info: name: ehicle Service Management System 1.0 - Cross-Site Scripting author: TenBird severity: medium description: | Vehicle Service...

Vehicle Service Management System 1.0 - Stored Cross Site Scripting

Vehicle Service Management System 1.0 contains a stored cross-site scripting vulnerability via the Mechanic List section in login panel. id: CVE-2021-46069 info: name: Vehicle Service Management System 1.0 - Stored Cross Site Scripting author: TenBird severity: medium description: | Vehicle Servi...

Vehicle Service Management System 1.0 - Cross Site Scripting

Vehicle Service Management System 1.0 contains a cross-site scripting vulnerability via the User List section in login panel. id: CVE-2021-46073 info: name: Vehicle Service Management System 1.0 - Cross Site Scripting author: TenBird severity: medium description: | Vehicle Service Management Syst...

Vehicle Service Management System 1.0 - Stored Cross Site Scripting

Vehicle Service Management System 1.0 contains a stored cross-site scripting vulnerability via the Service List section in login panel. id: CVE-2021-46072 info: name: Vehicle Service Management System 1.0 - Stored Cross Site Scripting author: TenBird severity: medium description: | Vehicle Servic...

Vehicle-Service-Management-System-MyAccount-Stored-Cross-Site-Scripting-XSS

CVE-2021-46068 エクスプロイトタイトル: Vehicle Service Management System - 'MyAccount' 格納型クロスサイトスクリプティング XSS エクスプロイト作成者: SANU P.L CVE: CVE-2021-46068 CVSS: 4.8 MEDIUM 参考情報: https://www.plsanu.com/vehicle-service-management-system-myaccount-stored-cross-site-scripting-xss...

Vehicle-Service-Management-System-Multiple-File-upload-Leads-to-Stored-Cross-Site-Scripting

CVE-2021-460780 エクスプロイトタイトル: Vehicle Service Management System - '複数の'ファイルアップロードにより格納型クロスサイトスクリプティングが発生する エクスプロイト作者: SANU P.L CVE: CVE-2021-460780 CVSS: 4.8 MEDIUM 参照: https://www.plsanu.com/vehicle-service-management-system-multiple-file-upload-leads-to-stored-cross-site-scripting...

Vehicle-Service-Management-System-Multiple-File-upload-Leads-to-Code-Execution

CVE-2021-46076 エクスプロイトタイトル: Vehicle Service Management System - 複数のファイルアップロードによるコード実行 エクスプロイト作成者: SANU P.L CVE: CVE-2021-46076 CVSS: 8.8 HIGH 参考文献: https://www.plsanu.com/vehicle-service-management-system-multiple-file-upload-leads-to-code-execution https://nvd.nist.gov/vuln/detail/CVE-2021-46076...

Vehicle-Service-Management-System-Multiple-Cross-Site-Request-Forgery-CSRF-Leads-to-XSS

CVE-2021-46080 エクスプロイトタイトル: Vehicle Service Management System - '複数'のクロスサイトリクエストフォージェリ CSRF が格納型クロスサイトスクリプティング XSS につながる エクスプロイト作者: SANU P.L CVE: CVE-2021-46080 CVSS: 4.8 MEDIUM 参照:...

Vehicle-Service-Management-System-Mechanic-List-Stored-Cross-Site-Scripting-XSS

CVE-2021-46069 エクスプロイトタイトル: Vehicle Service Management System - 'Mechanic List' Stored Cross Site Scripting XSS エクスプロイト作者: SANU P.L CVE: CVE-2021-46069 CVSS: 4.8 中 参考文献: https://www.plsanu.com/vehicle-service-management-system-mechanic-list-stored-cross-site-scripting-xss...

Vehicle-Service-Management-System-Category-List-Stored-Cross-Site-Scripting-XSS

CVE-2021-46071 漏洞标题: Vehicle Service Management System - '分类列表' 存储型跨站脚本（XSS） 漏洞作者: SANU P.L CVE: CVE-2021-46071 CVSS: 4.8 中危 参考链接: https://www.plsanu.com/vehicle-service-management-system-category-list-stored-cross-site-scripting-xss https://nvd.nist.gov/vuln/detail/CVE-2021-46071...

Vehicle-Service-Management-System-User-List-Stored-Cross-Site-Scripting-XSS

CVE-2021-46073 エクスプロイトタイトル: Vehicle Service Management System - ユーザーリストにおける格納型クロスサイトスクリプティング XSS エクスプロイト作成者: SANU P.L CVE: CVE-2021-46073 CVSS: 4.8 MEDIUM 参考文献: https://www.plsanu.com/vehicle-service-management-system-user-list-stored-cross-site-scripting-xss...

Vehicle-Service-Management-System-Settings-Stored-Cross-Site-Scripting-XSS

CVE-2021-46074 エクスプロイトのタイトル: Vehicle Service Management System - '設定' 保存型クロスサイトスクリプティング XSS エクスプロイト作成者: SANU P.L CVE: CVE-2021-46074 CVSS: 4.8 MEDIUM 参考文献: https://www.plsanu.com/vehicle-service-management-system-settings-stored-cross-site-scripting-xss...

Vehicle-Service-Management-System-Service-Requests-Stored-Cross-Site-Scripting-XSS

CVE-2021-46070 エクスプロイトタイトル: Vehicle Service Management System - 'Service Requests' 保存型クロスサイトスクリプティング XSS エクスプロイト作者: SANU P.L CVE: CVE-2021-46070 CVSS: 4.8 MEDIUM 参照: https://www.plsanu.com/vehicle-service-management-system-service-requests-stored-cross-site-scripting-xss...

CVE-2021-46074

CVE-2021-46074 Exploit Title: Vehicle Service Management System - 'Settings' 保存型クロスサイトスクリプティング XSS Exploit Author: SANU P.L CVE: CVE-2021-46074 CVSS: 4.8 MEDIUM 参照: https://www.plsanu.com/vehicle-service-management-system-settings-stored-cross-site-scripting-xss...

CVE-2021-46069

CVE-2021-46069 エクスプロイトタイトル: Vehicle Service Management System - 'Mechanic List' Stored Cross Site Scripting XSS エクスプロイト作者: SANU P.L CVE: CVE-2021-46069 CVSS: 4.8 MEDIUM 参考文献: https://www.plsanu.com/vehicle-service-management-system-mechanic-list-stored-cross-site-scripting-xss...

CVE-2021-46078

CVE-2021-46078 Exploit Title: Vehicle Service Management System - 'Multiple' ファイルアップロードにより格納型クロスサイトスクリプティングが発生 Exploit Author: SANU P.L CVE: CVE-2021-46078 CVSS: 4.8 MEDIUM References: https://www.plsanu.com/vehicle-service-management-system-multiple-file-upload-leads-to-stored-cross-site-scripti...

CVE-2021-46075

CVE-2021-46075 エクスプロイトタイトル: Vehicle Service Management System - 'Multiple' 特権昇格によりCRUD操作が可能 エクスプロイト作成者: SANU P.L CVE: CVE-2021-46075 CVSS: 7.2 HIGH 参考文献: https://www.plsanu.com/vehicle-service-management-system-multiple-privilege-escalation-leads-to-crud-operations...

CVE-2021-46067

CVE-2021-46067 Exploit Title: Vehicle Service Management System - 「複数の」Cookie窃取による完全なアカウント乗っ取り Exploit Author: SANU P.L CVE: CVE-2021-46067 CVSS: 9.8 緊急 References: https://www.plsanu.com/vehicle-service-management-system-multiple-cookie-stealing-leads-to-full-account-takeover...

CVE-2021-46076

CVE-2021-46076 エクスプロイトタイトル: Vehicle Service Management System - 'Multiple' ファイルアップロードがコード実行を引き起こす エクスプロイト作者: SANU P.L CVE: CVE-2021-46076 CVSS: 8.8 HIGH 参考: https://www.plsanu.com/vehicle-service-management-system-multiple-file-upload-leads-to-code-execution...