Author: P.L.Sanu

December 29, 2021 Vehicle Service Management System – ‘Multiple’ Cross-Site Request Forgery (CSRF) Leads to Stored Cross Site Scripting (XSS)

CVE-2021-46080 Exploit Title: Vehicle Service Management System – ‘Multiple’ Cross-Site Request Forgery (CSRF) Leads to Stored Cross Site Scripting (XSS)Exploit…

December 29, 2021 Vehicle Service Management System – ‘Multiple’ File upload Leads to Html Injection

CVE-2021-46079 Exploit Title: Vehicle Service Management System – ‘Multiple’ File upload Leads to Html InjectionExploit Author: P.L.SanuCVE: CVE-2021-46079CVSS: 7.2 HIGHReferences:https://www.plsanu.com/vehicle-service-management-system-multiple-file-upload-leads-to-html-injectionhttps://nvd.nist.gov/vuln/detail/CVE-2021-46079https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-46079…

December 28, 2021 Vehicle Service Management System – ‘Multiple’ File upload Leads to Stored Cross-Site Scripting

CVE-2021-46078 Exploit Title: Vehicle Service Management System – ‘Multiple’ File upload Leads to Stored Cross-Site ScriptingExploit Author: P.L.SanuCVE: CVE-2021-46078CVSS: 4.8…

December 28, 2021 Vehicle Service Management System – ‘Multiple’ File upload Leads to Code Execution

CVE-2021-46076 Exploit Title: Vehicle Service Management System – ‘Multiple’ File upload Leads to Code ExecutionExploit Author: P.L.SanuCVE: CVE-2021-46076CVSS: 8.8 HIGHReferences:https://www.plsanu.com/vehicle-service-management-system-multiple-file-upload-leads-to-code-executionhttps://nvd.nist.gov/vuln/detail/CVE-2021-46076https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-46076…