Medium severity5.4NVD Advisory· Published Sep 25, 2023· Updated Jun 17, 2026
CVE-2023-43456
CVE-2023-43456
Description
Cross Site Scripting vulnerability in Service Provider Management System v.1.0 allows a remote attacker to execute arbitrary code and obtain sensitive information via the firstname, middlename and lastname parameters in the /php-spms/admin/?page=user endpoint.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
2- Service Provider Management System/Service Provider Management Systemdescription
- Range: = 1.0
Patches
Vulnerability mechanics
References
3- samh4cks.github.io/posts/cve-2023-43456/nvdExploitMitigationThird Party Advisory
- www.sourcecodester.com/php/16501/service-provider-management-system-using-php-and-mysql-source-code-free-download.htmlnvdProduct
- www.sourcecodester.com/users/tips23nvdProduct
News mentions
0No linked articles in our index yet.