CVE-2023-34581

CriticalCVSS 9.8

Published: 12/06/2023(UTC)Updated: 17/06/2026(UTC)Translated: 18/06/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

High risk

3.28%

87th percentile - higher than 87% of all known CVEs

Sourcecodester Service Provider Management System v1.0 is vulnerable to SQL Injection via the ID parameter in /php-spms/?page=services/view&id=2.

Exploitation of this vulnerability may lead to unauthorized access to the database and exposure of sensitive information.

It is recommended to validate and sanitize input data and to update the system to the latest version to minimize the risk of attack.

Original NVD description (English source)

Sourcecodester Service Provider Management System v1.0 is vulnerable to SQL Injection via the ID parameter in /php-spms/?page=services/view&id=2