Exploitation Summary
EIP tracks 3 public exploits for CVE-2021-46068. PoCs published by sanupl, plsanu. A Nuclei detection template is also available.
AI-analyzed exploit summary This repository provides a functional proof-of-concept for a stored XSS vulnerability in Vehicle Service Management System 1.0. The exploit involves injecting a malicious script into the 'My Account' section, which executes when the page is loaded.
Description
A Stored Cross Site Scripting (XSS) vulnerability exists in Vehicle Service Management System 1.0 via the My Account Section in login panel.
Exploits (3)
This repository provides a functional proof-of-concept for a stored XSS vulnerability in Vehicle Service Management System 1.0. The exploit involves injecting a malicious script into the 'My Account' section, which executes when the page is loaded.
The repository provides a functional proof-of-concept for a stored XSS vulnerability in Vehicle Service Management System 1.0, demonstrating how an attacker can inject malicious JavaScript via the 'My Account' section.
This repository contains a proof-of-concept for a stored XSS vulnerability in Vehicle Service Management System 1.0, where malicious JavaScript can be injected via the 'My Account' section. The payload is straightforward and demonstrates cookie theft via an alert.
Nuclei Templates (1)
References (2)
Scores
CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N