CVE-2021-46067
CRITICALIn Vehicle Service Management System 1.0 - Info Disclosure
Title source: llmDescription
In Vehicle Service Management System 1.0 an attacker can steal the cookies leading to Full Account Takeover.
Exploits (1)
nomisec
WORKING POC
by plsanu · poc
https://github.com/plsanu/Vehicle-Service-Management-System-Multiple-Cookie-Stealing-Leads-to-Full-Account-Takeover
References (2)
Scores
CVSS v3
9.8
EPSS
0.1411
EPSS Percentile
94.4%
Attack Vector
NETWORK
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Details
Status
published
Products (1)
vehicle_service_management_system_project/vehicle_service_management_system
< 1.0
Published
Jan 06, 2022
Tracked Since
Feb 18, 2026