critical9.8
CVE-2021-46067
In Vehicle Service Management System 1.0 an attacker can steal the cookies leading to Full Account Takeover.
Impact
In Vehicle Service Management System 1.0 an attacker can steal the cookies leading to Full Account Takeover.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Vehicle Service Management System Project | Vehicle Service Management System | through 1.0 |
References
- NVD record
- CVE.org record
- https://github.com/plsanu/Vehicle-Service-Management-System-Multiple-Cookie-Stealing-Leads-to-Full-Account-Takeover
- https://www.plsanu.com/vehicle-service-management-system-multiple-cookie-stealing-leads-to-full-account-takeover
- https://github.com/plsanu/Vehicle-Service-Management-System-Multiple-Cookie-Stealing-Leads-to-Full-Account-Takeover
- https://www.plsanu.com/vehicle-service-management-system-multiple-cookie-stealing-leads-to-full-account-takeover