CVE:CVE-2021-41962
CNNVD:CNNVD-202112-1408
Sourcecodester Vehicle Service Management System是开源的一个PHP 项目。用于汽车维修/服务店或企业的简单 Web 应用程序。
Sourcecodester Vehicle Service Management System 存在跨站脚本漏洞，攻击者可通过 Vehicle_service 中发送服务请求中的所有者全名参数来进行攻击。
solution:Upgrade vehicle_service_management_system_project vehicle_service_management_system to a higher version than 1.0,and avoid the version 1.0