Blog - P.L.SANU

Blog

December 28, 2021 Vehicle Service Management System – ‘User List’ Stored Cross Site Scripting (XSS)

CVE-2021-46073 Exploit Title: Vehicle Service Management System – ‘User List’ Stored Cross Site Scripting (XSS)Exploit Author: P.L.SanuCVE: CVE-2021-46073CVSS: 4.8 MEDIUMReferences:https://www.plsanu.com/vehicle-service-management-system-user-list-stored-cross-site-scripting-xsshttps://nvd.nist.gov/vuln/detail/CVE-2021-46073https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-46073…

December 28, 2021 Vehicle Service Management System – ‘Service List’ Stored Cross Site Scripting (XSS)

CVE-2021-46072 Exploit Title: Vehicle Service Management System – ‘Service List’ Stored Cross Site Scripting (XSS)Exploit Author: P.L.SanuCVE: CVE-2021-46072CVSS: 4.8 MEDIUMReferences:https://www.plsanu.com/vehicle-service-management-system-service-list-stored-cross-site-scripting-xsshttps://nvd.nist.gov/vuln/detail/CVE-2021-46072https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-46072…

December 28, 2021 Vehicle Service Management System – ‘Category List’ Stored Cross Site Scripting (XSS)

CVE-2021-46071 Exploit Title: Vehicle Service Management System – ‘Category List’ Stored Cross Site Scripting (XSS)Exploit Author: P.L.SanuCVE: CVE-2021-46071CVSS: 4.8 MEDIUMReferences:https://www.plsanu.com/vehicle-service-management-system-category-list-stored-cross-site-scripting-xsshttps://nvd.nist.gov/vuln/detail/CVE-2021-46071https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-46071…

December 28, 2021 Vehicle Service Management System – ‘Service Requests’ Stored Cross Site Scripting (XSS)

CVE-2021-46070 Exploit Title: Vehicle Service Management System – ‘Service Requests’ Stored Cross Site Scripting (XSS)Exploit Author: P.L.SanuCVE: CVE-2021-46070CVSS: 4.8 MEDIUMReferences:https://www.plsanu.com/vehicle-service-management-system-service-requests-stored-cross-site-scripting-xsshttps://nvd.nist.gov/vuln/detail/CVE-2021-46070https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-46070…