Priority LOW 24
A vulnerability classified as problematic was found in SourceCodester Service Provider Management System 1.0.
CVSS 4.0MEDIUM 5.1· Network · High privileges · No interaction · EPSS 0.00452 · Published 2024-06-23 · No fix listed CWE-79
Priority HIGH 82
An issue in Service Provider Management System v.1.0 allows a remote attacker to gain privileges via the ID parameter in the /php-spms/admin/?page=user/ endpoint.
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.01362 · Published 2023-09-25 · No fix listed CWE-269
Priority MEDIUM 58
Cross Site Scripting vulnerability in Service Provider Management System v.1.0 allows a remote attacker to execute arbitrary code and obtain sensitive information via the firstname, middlename and lastname parameters in…
CVSS 3.1MEDIUM 5.4· Network · Low privileges · User interaction · EPSS 0.00789 · Published 2023-09-25 · No fix listed CWE-79
Priority MEDIUM 43
A vulnerability was found in SourceCodester Service Provider Management System 1.0.
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.00492 · Published 2023-07-12 · No fix listed CWE-89
Priority HIGH 82
Sourcecodester Service Provider Management System v1.0 is vulnerable to SQL Injection via the ID parameter in /php-spms/?page=services/view&id=2
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.03282 · Published 2023-06-12 · No fix listed CWE-89
Priority LOW 33
A vulnerability, which was classified as critical, was found in SourceCodester Service Provider Management System 1.0.
CVSS 3.1HIGH 7.2· Network · High privileges · No interaction · EPSS 0.00694 · Published 2023-06-06 · No fix listed CWE-89
Priority LOW 39
A vulnerability, which was classified as critical, has been found in SourceCodester Service Provider Management System 1.0.
CVSS 3.1HIGH 8.8· Network · Low privileges · No interaction · EPSS 0.00734 · Published 2023-06-06 · No fix listed CWE-89
Priority LOW 39
A vulnerability classified as critical has been found in SourceCodester Service Provider Management System 1.0.
CVSS 3.1HIGH 8.8· Network · Low privileges · No interaction · EPSS 0.00734 · Published 2023-05-17 · No fix listed CWE-89
Priority LOW 25
A vulnerability classified as problematic was found in SourceCodester Service Provider Management System 1.0.
CVSS 3.1MEDIUM 5.4· Network · Low privileges · User interaction · EPSS 0.00564 · Published 2023-04-27 · No fix listed CWE-79
Priority LOW 25
A vulnerability classified as problematic has been found in SourceCodester Service Provider Management System 1.0.
CVSS 3.1MEDIUM 5.4· Network · Low privileges · User interaction · EPSS 0.00564 · Published 2023-04-27 · No fix listed CWE-79
Priority MEDIUM 44
A vulnerability was found in SourceCodester Service Provider Management System 1.0.
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.0082 · Published 2023-04-27 · No fix listed CWE-89
Priority HIGH 75
A vulnerability was found in SourceCodester Service Provider Management System 1.0.
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.0082 · Published 2023-04-27 · No fix listed CWE-89
Priority MEDIUM 44
A vulnerability was found in SourceCodester Service Provider Management System 1.0.
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.0082 · Published 2023-04-27 · No fix listed CWE-89
Priority MEDIUM 43
A vulnerability was found in SourceCodester Service Provider Management System 1.0 and classified as critical.
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.00511 · Published 2023-04-27 · No fix listed CWE-285
Priority MEDIUM 44
A vulnerability has been found in SourceCodester Service Provider Management System 1.0 and classified as critical.
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.00834 · Published 2023-04-27 · No fix listed CWE-89
THREATIST.IORead the docs