Vendorsoretnom23service_provider_management_system1.0
Vulnerabilities

oretnom23 Service Provider Management System 1.0

Ranked by severity, then by exploit likelihood. Click a CVE ID for its full record.

15CVEs
CVE-2023-34581
Sourcecodester Service Provider Management System v1.0 is vulnerable to SQL Injection via the ID parameter in /php-spms/?page=services/view&id=2
Published 2023-06-12 · Modified
9.81 PoCEPSS 0.033
CVE-2023-43457
An issue in Service Provider Management System v.1.0 allows a remote attacker to gain privileges via the ID parameter in the /php-spms/admin/?page=user/ endpoint.
Published 2023-09-25 · Modified
9.8EPSS 0.010
CVE-2023-2344
SourceCodester Service Provider Management System HTTP POST Request sql injection
Published 2023-04-27 · Modified
9.8EPSS 0.008
CVE-2023-2346
SourceCodester Service Provider Management System view_inquiry.php sql injection
Published 2023-04-27 · Modified
9.8EPSS 0.008
CVE-2023-2347
SourceCodester Service Provider Management System manage_service.php sql injection
Published 2023-04-27 · Modified
9.8EPSS 0.008
CVE-2023-2348
SourceCodester Service Provider Management System manage_user.php sql injection
Published 2023-04-27 · Modified
9.8EPSS 0.008
CVE-2023-2345
SourceCodester Service Provider Management System improper authorization
Published 2023-04-27 · Modified
9.8EPSS 0.005
CVE-2023-3644
SourceCodester Service Provider Management System sql injection
Published 2023-07-12 · Modified
9.8EPSS 0.005
CVE-2023-2769
SourceCodester Service Provider Management System sql injection
Published 2023-05-17 · Modified
8.8EPSS 0.007
CVE-2023-3119
SourceCodester Service Provider Management System view.php sql injection
Published 2023-06-06 · Modified
8.8EPSS 0.007
CVE-2023-3120
SourceCodester Service Provider Management System view_service.php sql injection
Published 2023-06-06 · Modified
7.2EPSS 0.007
CVE-2023-43456
Cross Site Scripting vulnerability in Service Provider Management System v.1.0 allows a remote attacker to execute arbitrary code and obtain sensitive information via the firstname, middlename and lastname parameters in the /php-spms/admin/?page=user endpoint.
Published 2023-09-25 · Modified
5.4EPSS 0.007
CVE-2023-2349
SourceCodester Service Provider Management System index.php cross site scripting
Published 2023-04-27 · Modified
5.4EPSS 0.006
CVE-2023-2350
SourceCodester Service Provider Management System Users.php cross site scripting
Published 2023-04-27 · Modified
5.4EPSS 0.006
CVE-2024-6267
SourceCodester Service Provider Management System System Info Page index.php cross site scripting
Published 2024-06-23 · Modified
5.1EPSS 0.005