CVE-2023-34581
CriticalCVSS 9.8Exploitation Probability (EPSS)
High risk87th percentile - higher than 87% of all known CVEs
Summary
Sourcecodester Service Provider Management System v1.0 is vulnerable to SQL Injection via the ID parameter in /php-spms/?page=services/view&id=2.
Risk Assessment
Exploitation of this vulnerability may lead to unauthorized access to the database and exposure of sensitive information.
Recommendation
It is recommended to validate and sanitize input data and to update the system to the latest version to minimize the risk of attack.
Other vulnerabilities in Sourcecodester Service Provider Management System v1.0
See all- CVE-2023-3644Medium
A critical vulnerability was found in SourceCodester Service Provider Management System version 1.0. Manipulation of the 'id' argument in the file /classes/Master.php?f=save_inquiry leads to SQL injection, which can be initiated remotely.
- CVE-2023-3120Medium
A critical vulnerability was found in SourceCodester Service Provider Management System 1.0, affecting an unknown part of the file view_service.php. Manipulation of the argument id leads to SQL injection.
- CVE-2023-3119Medium
A critical vulnerability has been found in SourceCodester Service Provider Management System version 1.0. Manipulation of the 'id' argument in the view.php file leads to SQL injection, which can be exploited remotely.
Original NVD description (English source)
Sourcecodester Service Provider Management System v1.0 is vulnerable to SQL Injection via the ID parameter in /php-spms/?page=services/view&id=2