Sourcecodester Service Provider Management System v1.0 is vulnerable to SQL Injection via the ID parameter in /php-spms/?page=services/view&id=2
References
| Link | Resource |
|---|---|
| https://github.com/ashikkunjumon/cve-reports/blob/main/README.md | Exploit Third Party Advisory |
| https://packetstormsecurity.com/files/172559/Service-Provider-Management-System-1.0-SQL-Injection.html | Exploit Third Party Advisory VDB Entry |
| https://vulners.com/packetstorm/PACKETSTORM:172559 | Exploit Third Party Advisory |
| https://www.exploit-db.com/exploits/51482 | Exploit Third Party Advisory VDB Entry |
| https://github.com/ashikkunjumon/cve-reports/blob/main/README.md | Exploit Third Party Advisory |
| https://packetstormsecurity.com/files/172559/Service-Provider-Management-System-1.0-SQL-Injection.html | Exploit Third Party Advisory VDB Entry |
| https://vulners.com/packetstorm/PACKETSTORM:172559 | Exploit Third Party Advisory |
| https://www.exploit-db.com/exploits/51482 | Exploit Third Party Advisory VDB Entry |
Configurations
History
21 Nov 2024, 08:07
| Type | Values Removed | Values Added |
|---|---|---|
| References | () https://github.com/ashikkunjumon/cve-reports/blob/main/README.md - Exploit, Third Party Advisory | |
| References | () https://packetstormsecurity.com/files/172559/Service-Provider-Management-System-1.0-SQL-Injection.html - Exploit, Third Party Advisory, VDB Entry | |
| References | () https://vulners.com/packetstorm/PACKETSTORM:172559 - Exploit, Third Party Advisory | |
| References | () https://www.exploit-db.com/exploits/51482 - Exploit, Third Party Advisory, VDB Entry |
03 Oct 2023, 15:49
| Type | Values Removed | Values Added |
|---|---|---|
| First Time |
Oretnom23
Oretnom23 service Provider Management System |
|
| CPE | cpe:2.3:a:oretnom23:service_provider_management_system:1.0:*:*:*:*:*:*:* |
16 Jun 2023, 03:57
| Type | Values Removed | Values Added |
|---|---|---|
| CWE | CWE-89 | |
| References | (MISC) https://packetstormsecurity.com/files/172559/Service-Provider-Management-System-1.0-SQL-Injection.html - Exploit, Third Party Advisory, VDB Entry | |
| References | (MISC) https://www.exploit-db.com/exploits/51482 - Exploit, Third Party Advisory, VDB Entry | |
| References | (MISC) https://github.com/ashikkunjumon/cve-reports/blob/main/README.md - Exploit, Third Party Advisory | |
| References | (MISC) https://vulners.com/packetstorm/PACKETSTORM:172559 - Exploit, Third Party Advisory | |
| CVSS |
v2 : v3 : |
v2 : unknown
v3 : 9.8 |
| CPE | cpe:2.3:a:service_provider_management_system_project:service_provider_management_system:1.0:*:*:*:*:*:*:* | |
| First Time |
Service Provider Management System Project
Service Provider Management System Project service Provider Management System |
12 Jun 2023, 15:15
| Type | Values Removed | Values Added |
|---|---|---|
| New CVE |
Information
Published : 2023-06-12 15:15
Updated : 2024-11-21 08:07
NVD link : CVE-2023-34581
Mitre link : CVE-2023-34581
CVE.ORG link : CVE-2023-34581
JSON object : View
Products Affected
oretnom23
- service_provider_management_system
CWE
CWE-89
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')