CVE-2023-34581: SQL Injection
First published: Mon Jun 12 2023(Updated: )
Sourcecodester Service Provider Management System v1.0 is vulnerable to SQL Injection via the ID parameter in /php-spms/?page=services/view&id=2
Credit: cve@mitre.org cve@mitre.org
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Oretnom23 Service Provider Management System | =1.0 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
Frequently Asked Questions
What is the severity of CVE-2023-34581?
The severity of CVE-2023-34581 is critical.
How does CVE-2023-34581 impact Sourcecodester Service Provider Management System v1.0?
CVE-2023-34581 allows an attacker to perform SQL Injection via the ID parameter in the /php-spms/?page=services/view&id=2 page of the software.
How can I fix the SQL Injection vulnerability in Sourcecodester Service Provider Management System v1.0?
To fix the SQL Injection vulnerability in Sourcecodester Service Provider Management System v1.0, install the latest security patches or updates provided by the software vendor, and sanitize input parameters in the affected code to prevent SQL Injection attacks.
Are there any public references available for CVE-2023-34581?
Yes, you can find more information about CVE-2023-34581 in the following references: [link1], [link2], [link3].
What is the Common Weakness Enumeration (CWE) ID for CVE-2023-34581?
The Common Weakness Enumeration (CWE) ID for CVE-2023-34581 is 89.
- collector/nvd-api
- collector/nvd-index
- agent/references
- agent/severity
- agent/weakness
- agent/author
- agent/type
- agent/event
- agent/description
- agent/first-publish-date
- agent/softwarecombine
- agent/last-modified-date
- agent/tags
- collector/mitre-cve
- source/MITRE
- vendor/oretnom23
- canonical/oretnom23 service provider management system
- version/oretnom23 service provider management system/1.0