critical9.8Public exploit code
CVE-2023-34581
Sourcecodester Service Provider Management System v1.0 is vulnerable to SQL Injection via the ID parameter in /php-spms/?page=services/view&id=2
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- Service Provider Management System v1.0 - SQL Injection2023-05-24 · webapps · php · Verified
Impact
Sourcecodester Service Provider Management System v1.0 is vulnerable to SQL Injection via the ID parameter in /php-spms/?page=services/view&id=2
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Oretnom23 | Service Provider Management System | Version 1.0 |
Weakness classification
References
- NVD record
- CVE.org record
- https://github.com/ashikkunjumon/cve-reports/blob/main/README.md
- https://packetstormsecurity.com/files/172559/Service-Provider-Management-System-1.0-SQL-Injection.html
- https://vulners.com/packetstorm/PACKETSTORM:172559
- https://www.exploit-db.com/exploits/51482
- https://github.com/ashikkunjumon/cve-reports/blob/main/README.md
- https://packetstormsecurity.com/files/172559/Service-Provider-Management-System-1.0-SQL-Injection.html
- https://vulners.com/packetstorm/PACKETSTORM:172559
- https://www.exploit-db.com/exploits/51482