Exploitation Summary
EIP tracks 3 public exploits for CVE-2021-46078. PoCs published by sanupl, plsanu.
AI-analyzed exploit summary This repository provides a detailed technical writeup for CVE-2021-46078, a stored XSS vulnerability in Sourcecodester Vehicle Service Management System 1.0. It describes multiple attack vectors via unrestricted file uploads in different admin panel sections, including payload examples and exploitation steps.
Description
An Unrestricted File Upload vulnerability exists in Sourcecodester Vehicle Service Management System 1.0. A remote attacker can upload malicious files leading to a Stored Cross-Site Scripting vulnerability.
Exploits (3)
This repository provides a detailed technical writeup for CVE-2021-46078, a stored XSS vulnerability in Sourcecodester Vehicle Service Management System 1.0. It describes multiple attack vectors via unrestricted file uploads in different admin panel sections, including payload examples and exploitation steps.
The repository provides a functional proof-of-concept for CVE-2021-46078, demonstrating how an attacker can exploit unrestricted file upload vulnerabilities in the Vehicle Service Management System to achieve stored XSS via malicious HTML files uploaded through multiple endpoints.
This repository contains a proof-of-concept for CVE-2021-46078, demonstrating multiple file upload vulnerabilities in the Vehicle Service Management System 1.0 that lead to stored XSS. The exploit involves uploading malicious HTML files disguised as images in various admin sections.
References (2)
Scores
CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N