CVE-2023-50070

2023-12-2900:00:00

mitre

www.cve.org

cve-2023-50070

sql injection

sourcecodester customer support system

save_ticket

AI Score

9.5

Confidence

High

EPSS

0.001

Percentile

22.8%

JSON

Sourcecodester Customer Support System 1.0 has multiple SQL injection vulnerabilities in /customer_support/ajax.php?action=save_ticket via department_id, customer_id, and subject.

References

github.com/geraldoalcantara/CVE-2023-50070

medium.com/%40geraldoalcantarapro/cve-2023-50070-1f58c2a64b1c