PT-2023-28828

Name of the Vulnerable Software and Affected Versions Service Provider Management System version 1.0 Description A Cross Site Scripting issue allows a remote attacker to execute arbitrary code and obtain sensitive information via the firstname, middlename, and lastname parameters in the...

CVE-2023-43457: Improper Privilege Management

An issue in Service Provider Management System v.1.0 allows a remote attacker to gain privileges via the ID parameter in the /php-spms/admin/?page=user/ endpoint...