Show filters
23 Total Results
Displaying 11-20 of 23
Sort by:
Attacker Value
Unknown
CVE-2021-46078
Disclosure Date: January 06, 2022 (last updated February 23, 2025)
An Unrestricted File Upload vulnerability exists in Sourcecodester Vehicle Service Management System 1.0. A remote attacker can upload malicious files leading to a Stored Cross-Site Scripting vulnerability.
0
Attacker Value
Unknown
CVE-2021-46075
Disclosure Date: January 06, 2022 (last updated February 23, 2025)
A Privilege Escalation vulnerability exists in Sourcecodester Vehicle Service Management System 1.0. Staff account users can access the admin resources and perform CRUD Operations.
0
Attacker Value
Unknown
CVE-2021-46074
Disclosure Date: January 06, 2022 (last updated February 23, 2025)
A Stored Cross Site Scripting (XSS) vulnerability exists in Sourcecodester Vehicle Service Management System 1.0 via the Settings Section in login panel.
0
Attacker Value
Unknown
CVE-2021-46073
Disclosure Date: January 06, 2022 (last updated February 23, 2025)
A Stored Cross Site Scripting (XSS) vulnerability exists in Sourcecodester Vehicle Service Management System 1.0 via the User List Section in login panel.
0
Attacker Value
Unknown
CVE-2021-46072
Disclosure Date: January 06, 2022 (last updated February 23, 2025)
A Stored Cross Site Scripting (XSS) vulnerability exists in Vehicle Service Management System 1.0 via the Service List Section in login panel.
0
Attacker Value
Unknown
CVE-2021-46071
Disclosure Date: January 06, 2022 (last updated February 23, 2025)
A Stored Cross Site Scripting (XSS) vulnerability exists in Vehicle Service Management System 1.0 via the Category List Section in login panel.
0
Attacker Value
Unknown
CVE-2021-46070
Disclosure Date: January 06, 2022 (last updated February 23, 2025)
A Stored Cross Site Scripting (XSS) vulnerability exists in Vehicle Service Management System 1.0 via the Service Requests Section in login panel.
0
Attacker Value
Unknown
CVE-2021-46069
Disclosure Date: January 06, 2022 (last updated February 23, 2025)
A Stored Cross Site Scripting (XSS) vulnerability exists in Vehicle Service Management System 1.0 via the Mechanic List Section in login panel.
0
Attacker Value
Unknown
CVE-2021-46068
Disclosure Date: January 06, 2022 (last updated February 23, 2025)
A Stored Cross Site Scripting (XSS) vulnerability exists in Vehicle Service Management System 1.0 via the My Account Section in login panel.
0
Attacker Value
Unknown
CVE-2021-46067
Disclosure Date: January 06, 2022 (last updated October 07, 2023)
In Vehicle Service Management System 1.0 an attacker can steal the cookies leading to Full Account Takeover.
0
