PT-2023-31434

Name of the Vulnerable Software and Affected Versions Customer Support System version v1 Description A cross-site scripting XSS issue allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the subject parameter at "/customer support/index.php?page=new ticket...

PT-2023-31253

Name of the Vulnerable Software and Affected Versions Customer Support System version v1 Description A local file inclusion issue allows attackers to include internal PHP files and gain unauthorized access by manipulating the page parameter at the "/customer support/index.php" API endpoint...

PT-2023-31435

Name of the Vulnerable Software and Affected Versions Customer Support System version v1 Description A cross-site scripting XSS issue allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the address parameter at "/customer support/index.php?page=new...

PT-2023-31428

Name of the Vulnerable Software and Affected Versions Customer Support System version v1 Description The issue is related to a SQL injection vulnerability. This vulnerability can be exploited via the id parameter at the "/customer support/index.php?page=edit customer" API endpoint. Recommendation...