ORETNOM23 Service Provider Management System vulnerabilities

15 CVEs affecting ORETNOM23 Service Provider Management System, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2024-6267, published 2024-06-23.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2023-34581, published 2023-06-12. Critical severity, CVSS 9.8. EPSS: 3.3% chance of exploitation in the next 30 days. Sourcecodester Service Provider Management System v1.0 is vulnerable to SQL Injection via the ID parameter in /php-spms/?page=services/view&id=2
CVE-2023-43457, published 2023-09-25. Critical severity, CVSS 9.8. EPSS: 1.4% chance of exploitation in the next 30 days. An issue in Service Provider Management System v.1.0 allows a remote attacker to gain privileges via the ID parameter in the /php-spms/admin/?page=user/ endpoint.
CVE-2023-2344, published 2023-04-27. Critical severity, CVSS 9.8. EPSS: 0.8% chance of exploitation in the next 30 days. A vulnerability has been found in SourceCodester Service Provider Management System 1.0 and classified as critical. Affected by this vulnerability is an unknown functionality of the file…
CVE-2023-2348, published 2023-04-27. Critical severity, CVSS 9.8. EPSS: 0.8% chance of exploitation in the next 30 days. A vulnerability was found in SourceCodester Service Provider Management System 1.0. It has been rated as critical. This issue affects some unknown processing of the file /admin/user/manage_user.php.…
CVE-2023-2347, published 2023-04-27. Critical severity, CVSS 9.8. EPSS: 0.8% chance of exploitation in the next 30 days. A vulnerability was found in SourceCodester Service Provider Management System 1.0. It has been declared as critical. This vulnerability affects unknown code of the file…
CVE-2023-2346, published 2023-04-27. Critical severity, CVSS 9.8. EPSS: 0.8% chance of exploitation in the next 30 days. A vulnerability was found in SourceCodester Service Provider Management System 1.0. It has been classified as critical. This affects an unknown part of the file /admin/inquiries/view_inquiry.php. The…
CVE-2023-43456, published 2023-09-25. Medium severity, CVSS 5.4. EPSS: 0.8% chance of exploitation in the next 30 days. Cross Site Scripting vulnerability in Service Provider Management System v.1.0 allows a remote attacker to execute arbitrary code and obtain sensitive information via the firstname, middlename and…
CVE-2023-3119, published 2023-06-06. High severity, CVSS 8.8. EPSS: 0.7% chance of exploitation in the next 30 days. A vulnerability, which was classified as critical, has been found in SourceCodester Service Provider Management System 1.0. Affected by this issue is some unknown functionality of the file view.php.…
CVE-2023-2769, published 2023-05-17. High severity, CVSS 8.8. EPSS: 0.7% chance of exploitation in the next 30 days. A vulnerability classified as critical has been found in SourceCodester Service Provider Management System 1.0. This affects an unknown part of the file /classes/Master.php?f=delete_service. The…
CVE-2023-3120, published 2023-06-06. High severity, CVSS 7.2. EPSS: 0.7% chance of exploitation in the next 30 days. A vulnerability, which was classified as critical, was found in SourceCodester Service Provider Management System 1.0. This affects an unknown part of the file view_service.php. The manipulation of…

Latest

CVE-2024-6267, published 2024-06-23. Medium severity, CVSS 4.8. EPSS: 0.5% chance of exploitation in the next 30 days. A vulnerability classified as problematic was found in SourceCodester Service Provider Management System 1.0. Affected by this vulnerability is an unknown functionality of the file…
CVE-2023-3644, published 2023-07-12. Critical severity, CVSS 9.8. EPSS: 0.5% chance of exploitation in the next 30 days. A vulnerability was found in SourceCodester Service Provider Management System 1.0. It has been declared as critical. This vulnerability affects unknown code of the file…
CVE-2023-2350, published 2023-04-27. Medium severity, CVSS 5.4. EPSS: 0.6% chance of exploitation in the next 30 days. A vulnerability classified as problematic was found in SourceCodester Service Provider Management System 1.0. Affected by this vulnerability is an unknown functionality of the file…
CVE-2023-2349, published 2023-04-27. Medium severity, CVSS 5.4. EPSS: 0.6% chance of exploitation in the next 30 days. A vulnerability classified as problematic has been found in SourceCodester Service Provider Management System 1.0. Affected is an unknown function of the file /admin/index.php. The manipulation of…