Aller au contenu

Fiche vulnérabilité

CVE-2023-2347 : faille critique oretnom23 service provider management… (CVSS 9.8)

Description

A vulnerability was found in SourceCodester Service Provider Management System 1.0. It has been declared as critical. This vulnerability affects unknown code of the file /admin/services/manage_service.php. The manipulation of the argument id leads to sql injection. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. VDB-227590 is the identifier assigned to this vulnerability.

En bref

Sévérité
Critique (CVSS 9.8)
Vecteur CVSS
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Exploitation active
Non signalée par la CISA
Publication
27 avr. 2023
Dernière mise à jour
17 juin 2026

Produits concernés

  • oretnom23 service provider management system

Références

Rechercher une autre vulnérabilité dans la base CVE