Lucene search
+L

108 matches found

Positive Technologies
Positive Technologies
added 2023/09/25 12:00 a.m.18 views

PT-2023-28829 · Unknown · Service Provider Management System

Name of the Vulnerable Software and Affected Versions: Service Provider Management System version 1.0 Description: An issue in the system allows a remote attacker to gain privileges via the ID parameter in the "/php-spms/admin/?page=user/" endpoint. Recommendations: For version 1.0, consider...

9.8CVSS7.3AI score0.00983EPSS
SaveExploits1References9
CNNVD
CNNVD
added 2023/09/25 12:00 a.m.17 views

Service Provider Management System Security Vulnerability

Service Provider Management System is a web-based application developed by Carlo Montero, an individual developer. It is designed to provide dynamic web sites for service provider companies. A security vulnerability exists in Service Provider Management System version v.1.0 that originates from a...

9.8CVSS7.2AI score0.00983EPSS
SaveExploits1References4
CVE
CVE
added 2023/09/25 12:00 a.m.72 views

CVE-2023-43456

CVE-2023-43456 concerns a cross-site scripting vulnerability in Service Provider Management System v1.0. The flaw is triggered through the firstname, middlename, and lastname parameters in the /php-spms/admin/?page=user endpoint and is reported across multiple sources, including NVD and Red Hat a...

5.4CVSS5.8AI score0.0069EPSS
SaveExploits1References3Affected Software1
Vulnrichment
Vulnrichment
added 2023/09/25 12:00 a.m.13 views

CVE-2023-43456

Cross Site Scripting vulnerability in Service Provider Management System v.1.0 allows a remote attacker to execute arbitrary code and obtain sensitive information via the firstname, middlename and lastname parameters in the /php-spms/admin/?page=user endpoint...

7AI score0.0069EPSS
SaveExploits1References3
OSV
OSV
added 2023/07/12 6:15 p.m.6 views

CVE-2023-3644

A vulnerability was found in SourceCodester Service Provider Management System 1.0. It has been declared as critical. This vulnerability affects unknown code of the file /classes/Master.php?f=saveinquiry. The manipulation of the argument id leads to sql injection. The attack can be initiated...

9.8CVSS5.8AI score0.00492EPSS
SaveExploits0References2
NVD
NVD
added 2023/07/12 6:15 p.m.32 views

CVE-2023-3644

A vulnerability was found in SourceCodester Service Provider Management System 1.0. It has been declared as critical. This vulnerability affects unknown code of the file /classes/Master.php?f=saveinquiry. The manipulation of the argument id leads to sql injection. The attack can be initiated...

9.8CVSS0.00492EPSS
SaveExploits0References2
Prion
Prion
added 2023/07/12 6:15 p.m.25 views

Sql injection

A vulnerability was found in SourceCodester Service Provider Management System 1.0. It has been declared as critical. This vulnerability affects unknown code of the file /classes/Master.php?f=saveinquiry. The manipulation of the argument id leads to sql injection. The attack can be initiated...

6.5CVSS9.6AI score0.00492EPSS
SaveExploits0References2Affected Software1
CVE
CVE
added 2023/07/12 6:00 p.m.50 views

CVE-2023-3644

CVE-2023-3644 affects SourceCodester Service Provider Management System 1.0. The vulnerability is a SQL injection in /classes/Master.php?f=save_inquiry caused by manipulation of the id parameter, exploitable remotely. CVSS details in the primary record show high impact (C/H, I/H, A/H) with networ...

9.8CVSS8.2AI score0.00492EPSS
SaveExploits0References2Affected Software1
Cvelist
Cvelist
added 2023/07/12 6:00 p.m.36 views

CVE-2023-3644 SourceCodester Service Provider Management System sql injection

A vulnerability was found in SourceCodester Service Provider Management System 1.0. It has been declared as critical. This vulnerability affects unknown code of the file /classes/Master.php?f=saveinquiry. The manipulation of the argument id leads to sql injection. The attack can be initiated...

6.5CVSS9.9AI score0.00492EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
added 2023/07/12 12:00 a.m.12 views

PT-2023-25574 · Sourcecodester · Sourcecodester Service Provider Management System

Name of the Vulnerable Software and Affected Versions: SourceCodester Service Provider Management System version 1.0 Description: A critical issue has been found in the system, affecting the /classes/Master.php file, specifically when f=save inquiry. The manipulation of the id argument leads to S...

9.8CVSS7.3AI score0.00492EPSS
SaveExploits0References6
CNNVD
CNNVD
added 2023/07/12 12:00 a.m.17 views

Service Provider Management System SQL注入漏洞

Service Provider Management System is a web-based application developed by Carlo Montero, an individual developer. It is designed to provide dynamic websites for service provider companies. A SQL injection vulnerability exists in SourceCodester Service Provider Management System version 1.0, whic...

9.8CVSS7AI score0.00492EPSS
SaveExploits0References3
NVD
NVD
added 2023/06/12 3:15 p.m.27 views

CVE-2023-34581

Sourcecodester Service Provider Management System v1.0 is vulnerable to SQL Injection via the ID parameter in /php-spms/?page=services/view&id=2...

9.8CVSS9.8AI score0.03282EPSS
SaveExploits2References4
OSV
OSV
added 2023/06/12 3:15 p.m.12 views

CVE-2023-34581

Sourcecodester Service Provider Management System v1.0 is vulnerable to SQL Injection via the ID parameter in /php-spms/?page=services/view&id=2...

9.8CVSS7.4AI score0.03282EPSS
SaveExploits2References4
Prion
Prion
added 2023/06/12 3:15 p.m.24 views

Sql injection

Sourcecodester Service Provider Management System v1.0 is vulnerable to SQL Injection via the ID parameter in /php-spms/?page=services/view&id=2...

7.5CVSS9.7AI score0.03282EPSS
SaveExploits2References4Affected Software1
CNNVD
CNNVD
added 2023/06/12 12:00 a.m.12 views

Service Provider Management System SQL注入漏洞

Service Provider Management System is a web-based application developed by Carlo Montero, an individual developer. It is designed to provide dynamic websites for service provider companies. A security vulnerability exists in Service Provider Management System v1.0, which was discovered to contain...

9.8CVSS8.6AI score0.03282EPSS
SaveExploits2References5
CVE
CVE
added 2023/06/12 12:00 a.m.62 views

CVE-2023-34581

The CVE-2023-34581 issue affects Sourcecodester Service Provider Management System v1.0 and is triggered by an SQL Injection in the parameter id of the endpoint "/php-spms/?page=services/view&id=2". Public sources describe an exploitable vulnerability with high impact (NVD CVSS v3.1 base score 9....

9.8CVSS9.7AI score0.03282EPSS
SaveExploits2References4Affected Software1
Vulnrichment
Vulnrichment
added 2023/06/12 12:00 a.m.15 views

CVE-2023-34581

Sourcecodester Service Provider Management System v1.0 is vulnerable to SQL Injection via the ID parameter in /php-spms/?page=services/view&id=2...

8AI score0.03282EPSS
SaveExploits2References4
Cvelist
Cvelist
added 2023/06/12 12:00 a.m.39 views

CVE-2023-34581

Sourcecodester Service Provider Management System v1.0 is vulnerable to SQL Injection via the ID parameter in /php-spms/?page=services/view&id=2...

10AI score0.03282EPSS
SaveExploits2References4
NVD
NVD
added 2023/06/06 11:15 a.m.30 views

CVE-2023-3119

A vulnerability, which was classified as critical, has been found in SourceCodester Service Provider Management System 1.0. Affected by this issue is some unknown functionality of the file view.php. The manipulation of the argument id leads to sql injection. The attack may be launched remotely. T...

8.8CVSS7.2AI score0.00734EPSS
SaveExploits1References3
OSV
OSV
added 2023/06/06 11:15 a.m.21 views

CVE-2023-3119

A vulnerability, which was classified as critical, has been found in SourceCodester Service Provider Management System 1.0. Affected by this issue is some unknown functionality of the file view.php. The manipulation of the argument id leads to sql injection. The attack may be launched remotely. T...

8.8CVSS5.7AI score0.00734EPSS
SaveExploits1References3
Rows per page
Query Builder