Exploitation Summary
EIP tracks 3 public exploits for CVE-2021-46069. PoCs published by sanupl, plsanu. A Nuclei detection template is also available.
AI-analyzed exploit summary This repository provides a detailed technical writeup for CVE-2021-46069, a stored XSS vulnerability in Vehicle Service Management System 1.0. It includes a step-by-step exploitation guide, payload, and mitigation advice.
Description
A Stored Cross Site Scripting (XSS) vulnerability exists in Vehicle Service Management System 1.0 via the Mechanic List Section in login panel.
Exploits (3)
This repository provides a detailed technical writeup for CVE-2021-46069, a stored XSS vulnerability in Vehicle Service Management System 1.0. It includes a step-by-step exploitation guide, payload, and mitigation advice.
This repository provides a functional proof-of-concept for a stored XSS vulnerability in Vehicle Service Management System 1.0, where malicious JavaScript can be injected via the Mechanic List section. The exploit involves injecting a payload into the Full Name & Contact input fields, which executes upon saving.
This repository contains a proof-of-concept for a stored XSS vulnerability in Vehicle Service Management System 1.0, where malicious JavaScript can be injected via the Mechanic List section. The payload demonstrates cookie theft via an alert dialog.
Nuclei Templates (1)
References (2)
Scores
CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N