Vehicle Service Management System Project
Vehicle Service Management System Project Vehicle Service Management System: vulnerabilidades y CVE
Vehicle Service Management System Project Vehicle Service Management System tiene 20 vulnerabilidades publicadas, 0 de ellas en los últimos 12 meses. 6 son críticas y 0 figuran en el catálogo de explotación activa de CISA.
CVE20
Últimos 12 meses0
Críticas6
Explotadas activamente0
Todas las vulnerabilidades en el catálogo →⭐ Seguir esta tecnología
Últimas vulnerabilidades
| CVE | Severidad | EPSS | Explotación activa | Publicada | Descripción |
|---|---|---|---|---|---|
| CVE-2023-2099 | Media (6.1) | 0.65% | — | 15 abr 2023 | A vulnerability classified as problematic has been found in SourceCodester Vehicle Service Management System 1.0. This affects an unknown part of the file /classes/Users.php. The manipulation of the argument id leads to… |
| CVE-2023-2097 | Crítica (9.8) | 0.84% | — | 15 abr 2023 | A vulnerability was found in SourceCodester Vehicle Service Management System 1.0. It has been declared as critical. Affected by this vulnerability is an unknown functionality of the file /classes/Master.php. The… |
| CVE-2023-2096 | Crítica (9.8) | 0.75% | — | 15 abr 2023 | A vulnerability was found in SourceCodester Vehicle Service Management System 1.0. It has been classified as critical. Affected is an unknown function of the file /admin/service_requests/manage_inventory.php. The… |
| CVE-2023-2095 | Crítica (9.8) | 0.75% | — | 15 abr 2023 | A vulnerability was found in SourceCodester Vehicle Service Management System 1.0 and classified as critical. This issue affects some unknown processing of the file /admin/maintenance/manage_category.php. The… |
| CVE-2023-2093 | Crítica (9.8) | 0.75% | — | 15 abr 2023 | A vulnerability, which was classified as critical, was found in SourceCodester Vehicle Service Management System 1.0. This affects an unknown part of the file /classes/Login.php. The manipulation of the argument… |
| CVE-2023-2092 | Crítica (9.8) | 0.75% | — | 15 abr 2023 | A vulnerability, which was classified as critical, has been found in SourceCodester Vehicle Service Management System 1.0. Affected by this issue is some unknown functionality of the file view_service.php. The… |
| CVE-2021-46079 | Alta (7.2) | 3.3% | — | 6 ene 2022 | An Unrestricted File Upload vulnerability exists in Sourcecodester Vehicle Service Management System 1.0. A remote attacker can upload malicious files leading to Html Injection. |
| CVE-2021-46078 | Media (4.8) | 1.3% | — | 6 ene 2022 | An Unrestricted File Upload vulnerability exists in Sourcecodester Vehicle Service Management System 1.0. A remote attacker can upload malicious files leading to a Stored Cross-Site Scripting vulnerability. |
| CVE-2021-46075 | Alta (7.2) | 2.6% | — | 6 ene 2022 | A Privilege Escalation vulnerability exists in Sourcecodester Vehicle Service Management System 1.0. Staff account users can access the admin resources and perform CRUD Operations. |
| CVE-2021-46074 | Media (4.8) | 1.1% | — | 6 ene 2022 | A Stored Cross Site Scripting (XSS) vulnerability exists in Sourcecodester Vehicle Service Management System 1.0 via the Settings Section in login panel. |
| CVE-2021-46073 | Media (4.8) | 2.7% | — | 6 ene 2022 | A Stored Cross Site Scripting (XSS) vulnerability exists in Sourcecodester Vehicle Service Management System 1.0 via the User List Section in login panel. |
| CVE-2021-46072 | Media (4.8) | 2.7% | — | 6 ene 2022 | A Stored Cross Site Scripting (XSS) vulnerability exists in Vehicle Service Management System 1.0 via the Service List Section in login panel. |
| CVE-2021-46071 | Media (4.8) | 2.7% | — | 6 ene 2022 | A Stored Cross Site Scripting (XSS) vulnerability exists in Vehicle Service Management System 1.0 via the Category List Section in login panel. |
| CVE-2021-46070 | Media (4.8) | 0.88% | — | 6 ene 2022 | A Stored Cross Site Scripting (XSS) vulnerability exists in Vehicle Service Management System 1.0 via the Service Requests Section in login panel. |
| CVE-2021-46069 | Media (4.8) | 2.7% | — | 6 ene 2022 | A Stored Cross Site Scripting (XSS) vulnerability exists in Vehicle Service Management System 1.0 via the Mechanic List Section in login panel. |
| CVE-2021-46068 | Media (4.8) | 2.7% | — | 6 ene 2022 | A Stored Cross Site Scripting (XSS) vulnerability exists in Vehicle Service Management System 1.0 via the My Account Section in login panel. |
| CVE-2021-46067 | Crítica (9.8) | 5.1% | — | 6 ene 2022 | In Vehicle Service Management System 1.0 an attacker can steal the cookies leading to Full Account Takeover. |
| CVE-2021-46080 | Media (4.8) | 0.58% | — | 6 ene 2022 | A Cross Site Request Forgery (CSRF) vulnerability exists in Vehicle Service Management System 1.0. An successful CSRF attacks leads to Stored Cross Site Scripting Vulnerability. |
| CVE-2021-46076 | Alta (8.8) | 3.3% | — | 6 ene 2022 | Sourcecodester Vehicle Service Management System 1.0 is vulnerable to File upload. An attacker can upload a malicious php file in multiple endpoints it leading to Code Execution. |
| CVE-2021-41962 | Media (4.8) | 0.60% | — | 16 dic 2021 | Cross Site Scripting (XSS) vulnerability exists in Sourcecodester Vehicle Service Management System 1.0 via the Owner fullname parameter in a Send Service Request in vehicle_service. |