3 matches found
CVE-2023-49548: Improper Neutralization of Special Elements used in an SQL Command
Customer Support System v1 was discovered to contain a SQL injection vulnerability via the lastname parameter at /customersupport/ajax.php?action=saveuser...
8.8CVSS5.8AI score0.00755EPSS
SaveExploits1References2
CVE-2023-49970: Improper Neutralization of Special Elements used in an SQL Command
Customer Support System v1 was discovered to contain a SQL injection vulnerability via the subject parameter at /customersupport/ajax.php?action=saveticket...
9.8CVSS5.8AI score0.00818EPSS
SaveExploits1References2
CVE-2023-49546: Improper Neutralization of Special Elements used in an SQL Command
Customer Support System v1 was discovered to contain a SQL injection vulnerability via the email parameter at /customersupport/ajax.php...
8.8CVSS5.8AI score0.00755EPSS
SaveExploits1References2
20