Exploitation Summary
EIP tracks 3 public exploits for CVE-2021-46071. PoCs published by sanupl, plsanu. A Nuclei detection template is also available.
AI-analyzed exploit summary This repository provides a detailed technical description of a Stored XSS vulnerability in Vehicle Service Management System 1.0, including the exploit steps and payload. It does not contain functional exploit code but offers a clear walkthrough of the vulnerability.
Description
A Stored Cross Site Scripting (XSS) vulnerability exists in Vehicle Service Management System 1.0 via the Category List Section in login panel.
Exploits (3)
This repository provides a detailed technical description of a Stored XSS vulnerability in Vehicle Service Management System 1.0, including the exploit steps and payload. It does not contain functional exploit code but offers a clear walkthrough of the vulnerability.
This repository provides a functional proof-of-concept for a stored XSS vulnerability in Vehicle Service Management System 1.0. The exploit involves injecting a malicious script into the 'Category Name' field, which executes when saved and viewed.
This repository contains a proof-of-concept for a stored XSS vulnerability in Vehicle Service Management System 1.0, where an attacker can inject malicious JavaScript code via the Category Name input field in the admin panel.
Nuclei Templates (1)
References (2)
Scores
CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N