Lucene search
K
Database
Vendors
Products
Timeline
Vulnerabilities
Perimeter Scanner
Scanning
Projects
Scanner
Agent Scanning
API Scanning
Manual Audit
Email
Webhook
Resources
Documents
Blog
Glossary
FAQ
Plugins
Pricing
Contacts
About Us
Partners
Branding Guideline
Settings
Sign in
Vehicle Service Management System ProjectVehicle Service Management System

21 matches found

CVE
CVE•added 2023/04/15 10:15 a.m.•267 views

CVE-2023-2092

A vulnerability, which was classified as critical, has been found in SourceCodester Vehicle Service Management System 1.0. Affected by this issue is some unknown functionality of the file view_service.php. The manipulation of the argument id leads to sql injection. The attack may be launched remote...

9.8CVSS8.2AI score0.00052EPSS
CVE
CVE•added 2022/01/06 4:15 p.m.•45 views

CVE-2021-46073

A Stored Cross Site Scripting (XSS) vulnerability exists in Sourcecodester Vehicle Service Management System 1.0 via the User List Section in login panel.

4.8CVSS4.8AI score0.0426EPSS
CVE
CVE•added 2022/01/06 4:15 p.m.•43 views

CVE-2021-46072

A Stored Cross Site Scripting (XSS) vulnerability exists in Vehicle Service Management System 1.0 via the Service List Section in login panel.

4.8CVSS4.8AI score0.0426EPSS
CVE
CVE•added 2022/01/06 4:15 p.m.•42 views

CVE-2021-46075

A Privilege Escalation vulnerability exists in Sourcecodester Vehicle Service Management System 1.0. Staff account users can access the admin resources and perform CRUD Operations.

7.2CVSS6.9AI score0.01579EPSS
CVE
CVE•added 2022/01/06 4:15 p.m.•41 views

CVE-2021-46068

A Stored Cross Site Scripting (XSS) vulnerability exists in Vehicle Service Management System 1.0 via the My Account Section in login panel.

4.8CVSS4.8AI score0.0426EPSS
CVE
CVE•added 2022/01/06 4:15 p.m.•41 views

CVE-2021-46071

A Stored Cross Site Scripting (XSS) vulnerability exists in Vehicle Service Management System 1.0 via the Category List Section in login panel.

4.8CVSS4.8AI score0.0426EPSS
CVE
CVE•added 2022/01/06 4:15 p.m.•41 views

CVE-2021-46078

An Unrestricted File Upload vulnerability exists in Sourcecodester Vehicle Service Management System 1.0. A remote attacker can upload malicious files leading to a Stored Cross-Site Scripting vulnerability.

4.8CVSS4.9AI score0.01765EPSS
CVE
CVE•added 2022/01/06 4:15 p.m.•40 views

CVE-2021-46069

A Stored Cross Site Scripting (XSS) vulnerability exists in Vehicle Service Management System 1.0 via the Mechanic List Section in login panel.

4.8CVSS4.8AI score0.0426EPSS
CVE
CVE•added 2023/04/15 11:15 a.m.•40 views

CVE-2023-2095

A vulnerability was found in SourceCodester Vehicle Service Management System 1.0 and classified as critical. This issue affects some unknown processing of the file /admin/maintenance/manage_category.php. The manipulation of the argument id leads to sql injection. The attack may be initiated remote...

9.8CVSS8.3AI score0.00052EPSS
CVE
CVE•added 2022/01/06 4:15 p.m.•39 views

CVE-2021-46074

A Stored Cross Site Scripting (XSS) vulnerability exists in Sourcecodester Vehicle Service Management System 1.0 via the Settings Section in login panel.

4.8CVSS4.8AI score0.00598EPSS
CVE
CVE•added 2021/12/16 6:15 p.m.•37 views

CVE-2021-41962

Cross Site Scripting (XSS) vulnerability exists in Sourcecodester Vehicle Service Management System 1.0 via the Owner fullname parameter in a Send Service Request in vehicle_service.

4.8CVSS4.9AI score0.00206EPSS
CVE
CVE•added 2022/01/06 4:15 p.m.•37 views

CVE-2021-46079

An Unrestricted File Upload vulnerability exists in Sourcecodester Vehicle Service Management System 1.0. A remote attacker can upload malicious files leading to Html Injection.

7.2CVSS6.9AI score0.08626EPSS
CVE
CVE•added 2023/04/15 11:15 a.m.•37 views

CVE-2023-2096

A vulnerability was found in SourceCodester Vehicle Service Management System 1.0. It has been classified as critical. Affected is an unknown function of the file /admin/service_requests/manage_inventory.php. The manipulation of the argument id leads to sql injection. It is possible to launch the a...

9.8CVSS8.3AI score0.00052EPSS
CVE
CVE•added 2023/04/15 10:15 a.m.•36 views

CVE-2023-2093

A vulnerability, which was classified as critical, was found in SourceCodester Vehicle Service Management System 1.0. This affects an unknown part of the file /classes/Login.php. The manipulation of the argument username leads to sql injection. It is possible to initiate the attack remotely. The ex...

9.8CVSS8.2AI score0.00052EPSS
CVE
CVE•added 2022/01/06 4:15 p.m.•35 views

CVE-2021-46067

In Vehicle Service Management System 1.0 an attacker can steal the cookies leading to Full Account Takeover.

9.8CVSS9.3AI score0.14113EPSS
CVE
CVE•added 2022/01/06 3:15 p.m.•34 views

CVE-2021-46080

A Cross Site Request Forgery (CSRF) vulnerability exists in Vehicle Service Management System 1.0. An successful CSRF attacks leads to Stored Cross Site Scripting Vulnerability.

4.8CVSS5.1AI score0.00281EPSS
CVE
CVE•added 2022/01/06 4:15 p.m.•32 views

CVE-2021-46070

A Stored Cross Site Scripting (XSS) vulnerability exists in Vehicle Service Management System 1.0 via the Service Requests Section in login panel.

4.8CVSS4.8AI score0.00752EPSS
CVE
CVE•added 2022/01/06 3:15 p.m.•32 views

CVE-2021-46076

Sourcecodester Vehicle Service Management System 1.0 is vulnerable to File upload. An attacker can upload a malicious php file in multiple endpoints it leading to Code Execution.

8.8CVSS8.7AI score0.07642EPSS
CVE
CVE•added 2023/04/15 12:15 p.m.•32 views

CVE-2023-2097

A vulnerability was found in SourceCodester Vehicle Service Management System 1.0. It has been declared as critical. Affected by this vulnerability is an unknown functionality of the file /classes/Master.php. The manipulation of the argument id leads to sql injection. The attack can be launched rem...

9.8CVSS7.3AI score0.00056EPSS
CVE
CVE•added 2023/04/15 11:15 a.m.•31 views

CVE-2023-2094

A vulnerability has been found in SourceCodester Vehicle Service Management System 1.0 and classified as critical. This vulnerability affects unknown code of the file /admin/mechanics/manage_mechanic.php. The manipulation of the argument id leads to sql injection. The attack can be initiated remote...

9.8CVSS8.3AI score0.00052EPSS
CVE
CVE•added 2023/04/15 12:15 p.m.•31 views

CVE-2023-2099

A vulnerability classified as problematic has been found in SourceCodester Vehicle Service Management System 1.0. This affects an unknown part of the file /classes/Users.php. The manipulation of the argument id leads to cross site scripting. It is possible to initiate the attack remotely. The explo...

6.1CVSS4.8AI score0.00069EPSS