Critical severity9.8NVD Advisory· Published Sep 25, 2023· Updated Jun 17, 2026
CVE-2023-43457
CVE-2023-43457
Description
An issue in Service Provider Management System v.1.0 allows a remote attacker to gain privileges via the ID parameter in the /php-spms/admin/?page=user/ endpoint.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
3= 1.0+ 1 more
- (no CPE)range: = 1.0
- (no CPE)
- cpe:2.3:a:oretnom23:service_provider_management_system:1.0:*:*:*:*:*:*:*
Patches
Vulnerability mechanics
References
3- samh4cks.github.io/posts/cve-2023-43457/nvdExploitMitigationThird Party Advisory
- www.sourcecodester.com/php/16501/service-provider-management-system-using-php-and-mysql-source-code-free-download.htmlnvdProduct
- www.sourcecodester.com/users/tips23nvdProduct
News mentions
0No linked articles in our index yet.