Lucene search

K
Vehicle Service Management System ProjectVehicle Service Management System*

12 matches found

CVE
CVE
added 2022/01/06 4:15 p.m.47 views

CVE-2021-46073

A Stored Cross Site Scripting (XSS) vulnerability exists in Sourcecodester Vehicle Service Management System 1.0 via the User List Section in login panel.

4.8CVSS4.8AI score0.0426EPSS
Web
CVE
CVE
added 2022/01/06 4:15 p.m.45 views

CVE-2021-46072

A Stored Cross Site Scripting (XSS) vulnerability exists in Vehicle Service Management System 1.0 via the Service List Section in login panel.

4.8CVSS4.8AI score0.0426EPSS
Web
CVE
CVE
added 2022/01/06 4:15 p.m.44 views

CVE-2021-46075

A Privilege Escalation vulnerability exists in Sourcecodester Vehicle Service Management System 1.0. Staff account users can access the admin resources and perform CRUD Operations.

7.2CVSS6.9AI score0.01579EPSS
CVE
CVE
added 2022/01/06 4:15 p.m.43 views

CVE-2021-46068

A Stored Cross Site Scripting (XSS) vulnerability exists in Vehicle Service Management System 1.0 via the My Account Section in login panel.

4.8CVSS4.8AI score0.0426EPSS
Web
CVE
CVE
added 2022/01/06 4:15 p.m.43 views

CVE-2021-46071

A Stored Cross Site Scripting (XSS) vulnerability exists in Vehicle Service Management System 1.0 via the Category List Section in login panel.

4.8CVSS4.8AI score0.0426EPSS
Web
CVE
CVE
added 2022/01/06 4:15 p.m.43 views

CVE-2021-46078

An Unrestricted File Upload vulnerability exists in Sourcecodester Vehicle Service Management System 1.0. A remote attacker can upload malicious files leading to a Stored Cross-Site Scripting vulnerability.

4.8CVSS4.9AI score0.01765EPSS
Web
CVE
CVE
added 2022/01/06 4:15 p.m.42 views

CVE-2021-46069

A Stored Cross Site Scripting (XSS) vulnerability exists in Vehicle Service Management System 1.0 via the Mechanic List Section in login panel.

4.8CVSS4.8AI score0.0426EPSS
Web
CVE
CVE
added 2022/01/06 4:15 p.m.41 views

CVE-2021-46074

A Stored Cross Site Scripting (XSS) vulnerability exists in Sourcecodester Vehicle Service Management System 1.0 via the Settings Section in login panel.

4.8CVSS4.8AI score0.00598EPSS
Web
CVE
CVE
added 2022/01/06 4:15 p.m.39 views

CVE-2021-46079

An Unrestricted File Upload vulnerability exists in Sourcecodester Vehicle Service Management System 1.0. A remote attacker can upload malicious files leading to Html Injection.

7.2CVSS6.9AI score0.08626EPSS
Web
CVE
CVE
added 2022/01/06 4:15 p.m.37 views

CVE-2021-46067

In Vehicle Service Management System 1.0 an attacker can steal the cookies leading to Full Account Takeover.

9.8CVSS9.3AI score0.14113EPSS
Web
CVE
CVE
added 2022/01/06 3:15 p.m.36 views

CVE-2021-46080

A Cross Site Request Forgery (CSRF) vulnerability exists in Vehicle Service Management System 1.0. An successful CSRF attacks leads to Stored Cross Site Scripting Vulnerability.

4.8CVSS5.1AI score0.00281EPSS
Web
CVE
CVE
added 2022/01/06 4:15 p.m.34 views

CVE-2021-46070

A Stored Cross Site Scripting (XSS) vulnerability exists in Vehicle Service Management System 1.0 via the Service Requests Section in login panel.

4.8CVSS4.8AI score0.00752EPSS
Web