Priority MEDIUM 60
A vulnerability classified as problematic has been found in SourceCodester Vehicle Service Management System 1.0.
CVSS 3.1MEDIUM 6.1· Network · No auth · User interaction · EPSS 0.00652 · Published 2023-04-15 · No fix listed CWE-79
Priority HIGH 75
A vulnerability was found in SourceCodester Vehicle Service Management System 1.0.
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.00843 · Published 2023-04-15 · No fix listed CWE-89
Priority MEDIUM 43
A vulnerability was found in SourceCodester Vehicle Service Management System 1.0.
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.00749 · Published 2023-04-15 · No fix listed CWE-89
Priority MEDIUM 43
A vulnerability was found in SourceCodester Vehicle Service Management System 1.0 and classified as critical.
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.00749 · Published 2023-04-15 · No fix listed CWE-89
Priority MEDIUM 43
A vulnerability, which was classified as critical, was found in SourceCodester Vehicle Service Management System 1.0.
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.00749 · Published 2023-04-15 · No fix listed CWE-89
Priority MEDIUM 43
A vulnerability, which was classified as critical, has been found in SourceCodester Vehicle Service Management System 1.0.
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.00749 · Published 2023-04-15 · No fix listed CWE-89
Priority LOW 38
An Unrestricted File Upload vulnerability exists in Sourcecodester Vehicle Service Management System 1.0.
CVSS 3.1HIGH 7.2· Network · High privileges · No interaction · EPSS 0.03362 · Published 2022-01-06 · No fix listed CWE-434
Priority LOW 25
An Unrestricted File Upload vulnerability exists in Sourcecodester Vehicle Service Management System 1.0.
CVSS 3.1MEDIUM 4.8· Network · High privileges · User interaction · EPSS 0.01281 · Published 2022-01-06 · No fix listed CWE-434
Priority LOW 27
A Stored Cross Site Scripting (XSS) vulnerability exists in Vehicle Service Management System 1.0 via the My Account Section in login panel.
CVSS 3.1MEDIUM 4.8· Network · High privileges · User interaction · EPSS 0.0278 · Published 2022-01-06 · No fix listed CWE-79
Priority MEDIUM 50
In Vehicle Service Management System 1.0 an attacker can steal the cookies leading to Full Account Takeover.
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.05221 · Published 2022-01-06 · No fix listed
Priority LOW 27
A Stored Cross Site Scripting (XSS) vulnerability exists in Vehicle Service Management System 1.0 via the Mechanic List Section in login panel.
CVSS 3.1MEDIUM 4.8· Network · High privileges · User interaction · EPSS 0.0278 · Published 2022-01-06 · No fix listed CWE-79
Priority LOW 24
A Stored Cross Site Scripting (XSS) vulnerability exists in Vehicle Service Management System 1.0 via the Service Requests Section in login panel.
CVSS 3.1MEDIUM 4.8· Network · High privileges · User interaction · EPSS 0.0089 · Published 2022-01-06 · No fix listed CWE-79
Priority LOW 27
A Stored Cross Site Scripting (XSS) vulnerability exists in Vehicle Service Management System 1.0 via the Category List Section in login panel.
CVSS 3.1MEDIUM 4.8· Network · High privileges · User interaction · EPSS 0.0278 · Published 2022-01-06 · No fix listed CWE-79
Priority LOW 27
A Stored Cross Site Scripting (XSS) vulnerability exists in Vehicle Service Management System 1.0 via the Service List Section in login panel.
CVSS 3.1MEDIUM 4.8· Network · High privileges · User interaction · EPSS 0.0278 · Published 2022-01-06 · No fix listed CWE-79
Priority LOW 27
A Stored Cross Site Scripting (XSS) vulnerability exists in Sourcecodester Vehicle Service Management System 1.0 via the User List Section in login panel.
CVSS 3.1MEDIUM 4.8· Network · High privileges · User interaction · EPSS 0.0278 · Published 2022-01-06 · No fix listed CWE-79
Priority LOW 24
A Stored Cross Site Scripting (XSS) vulnerability exists in Sourcecodester Vehicle Service Management System 1.0 via the Settings Section in login panel.
CVSS 3.1MEDIUM 4.8· Network · High privileges · User interaction · EPSS 0.0116 · Published 2022-01-06 · No fix listed CWE-79
Priority LOW 37
A Privilege Escalation vulnerability exists in Sourcecodester Vehicle Service Management System 1.0.
CVSS 3.1HIGH 7.2· Network · High privileges · No interaction · EPSS 0.02658 · Published 2022-01-06 · No fix listed CWE-862
Priority MEDIUM 44
Sourcecodester Vehicle Service Management System 1.0 is vulnerable to File upload.
CVSS 3.1HIGH 8.8· Network · Low privileges · No interaction · EPSS 0.03359 · Published 2022-01-06 · No fix listed CWE-434
Priority LOW 23
A Cross Site Request Forgery (CSRF) vulnerability exists in Vehicle Service Management System 1.0.
CVSS 3.1MEDIUM 4.8· Network · High privileges · User interaction · EPSS 0.0059 · Published 2022-01-06 · No fix listed CWE-352
Priority LOW 23
Cross Site Scripting (XSS) vulnerability exists in Sourcecodester Vehicle Service Management System 1.0 via the Owner fullname parameter in a Send Service Request in vehicle_service.
CVSS 3.1MEDIUM 4.8· Network · High privileges · User interaction · EPSS 0.0062 · Published 2021-12-16 · No fix listed CWE-79
THREATIST.IORead the docs