Critical severity9.8NVD Advisory· Published Sep 25, 2023· Updated Jun 17, 2026
CVE-2023-43457
CVE-2023-43457
Description
An issue in Service Provider Management System v.1.0 allows a remote attacker to gain privileges via the ID parameter in the /php-spms/admin/?page=user/ endpoint.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
2- Service Provider Management System/Service Provider Management Systemdescription
- Range: = 1.0
Patches
Vulnerability mechanics
References
3- samh4cks.github.io/posts/cve-2023-43457/nvdExploitMitigationThird Party Advisory
- www.sourcecodester.com/php/16501/service-provider-management-system-using-php-and-mysql-source-code-free-download.htmlnvdProduct
- www.sourcecodester.com/users/tips23nvdProduct
News mentions
0No linked articles in our index yet.