CVE-2023-3120

A vulnerability, which was classified as critical, was found in SourceCodester Service Provider Management System 1.0. This affects an unknown part of the file view_service.php. The manipulation of the argument id leads to sql injection. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. The associated identifier of this vulnerability is VDB-230799.

• CWE-89

• https://github.com/Peanut886/Vulnerability/blob/main/webray.com.cn/Service%20Provider%20Management%20System%20-%20multiple%20vulnerabilities.mdExploit, Technical Description
• https://vuldb.com/?ctiid.230799Technical Description
• https://vuldb.com/?id.230799Technical Description
• https://github.com/Peanut886/Vulnerability/blob/main/webray.com.cn/Service%20Provider%20Management%20System%20-%20multiple%20vulnerabilities.mdExploit, Technical Description
• https://vuldb.com/?ctiid.230799Technical Description
• https://vuldb.com/?id.230799Technical Description

Published

Jun 6, 2023

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2023-31194An improper array index validation vulnerability exists in t…7.8
• CVE-2023-31195ASUS Router RT-AX3000 Firmware versions prior to 3.0.0.4.388…5.3
• CVE-2023-31196Missing authentication for critical function in Wi-Fi AP UNI…7.5
• CVE-2023-31197Uncontrolled search path in the Intel(R) Trace Analyzer and …7.8
• CVE-2023-31198OS command injection vulnerability exists in Wi-Fi AP UNIT a…7.2
• CVE-2023-31199Improper access control in the Intel(R) Solid State Drive To…6.7
• CVE-2023-31200 PTC Vuforia Studio does not require a token; this could…8
• CVE-2023-31203Improper input validation in some OpenVINO Model Server soft…7.5
• CVE-2023-31206Exposure of Resource to Wrong Sphere Vulnerability in Apache…7.5
• CVE-2023-31207Transmission of credentials within query parameters in Check…5.5
• CVE-2023-31208Improper neutralization of livestatus command delimiters in …8.8
• CVE-2023-31209Improper neutralization of active check command arguments in…8.8