Lucene search
+L

198 matches found

ATTACKERKB
ATTACKERKB
added 2024/03/01 10:15 p.m.3 views

CVE-2023-49545

A directory listing vulnerability in Customer Support System v1 allows attackers to list directories and sensitive files within the application without requiring authorization...

7.5CVSS5.8AI score0.00776EPSS
SaveExploits1References4
OSV
OSV
added 2024/03/01 10:15 p.m.7 views

CVE-2023-49544

A local file inclusion LFI in Customer Support System v1 allows attackers to include internal PHP files and gain unauthorized acces via manipulation of the page= parameter at /customersupport/index.php...

4.9CVSS5.8AI score0.00766EPSS
SaveExploits1References3
OSV
OSV
added 2024/03/01 10:15 p.m.6 views

CVE-2023-49545

A directory listing vulnerability in Customer Support System v1 allows attackers to list directories and sensitive files within the application without requiring authorization...

7.5CVSS5.8AI score0.00776EPSS
SaveExploits1References3
ATTACKERKB
ATTACKERKB
added 2024/03/01 10:15 p.m.6 views

CVE-2023-49544

A local file inclusion LFI in Customer Support System v1 allows attackers to include internal PHP files and gain unauthorized acces via manipulation of the page= parameter at /customersupport/index.php...

4.9CVSS5.7AI score0.00766EPSS
SaveExploits1References4
NVD
NVD
added 2024/03/01 10:15 p.m.16 views

CVE-2023-49544

A local file inclusion LFI in Customer Support System v1 allows attackers to include internal PHP files and gain unauthorized acces via manipulation of the page= parameter at /customersupport/index.php...

4.9CVSS6.6AI score0.00766EPSS
SaveExploits1References3
Prion
Prion
added 2024/03/01 10:15 p.m.14 views

Remote file inclusion

A local file inclusion LFI in Customer Support System v1 allows attackers to include internal PHP files and gain unauthorized acces via manipulation of the page= parameter at /customersupport/index.php...

7.2AI score0.00766EPSS
SaveExploits1References3
Prion
Prion
added 2024/03/01 10:15 p.m.21 views

Authorization

A directory listing vulnerability in Customer Support System v1 allows attackers to list directories and sensitive files within the application without requiring authorization...

7AI score0.00776EPSS
SaveExploits1References3
CNNVD
CNNVD
added 2024/03/01 12:0 a.m.8 views

Customer Support System Security Breach

Customer Support System is a customer support system by oretnom23 Individual Developer that helps a particular business or company to provide customer support after a customer has purchased a product from them. A security vulnerability exists in the v1 version of Customer Support System, which...

4.9CVSS6.8AI score0.00766EPSS
SaveExploits1References4
Cvelist
Cvelist
added 2024/03/01 12:0 a.m.21 views

CVE-2023-49544

A local file inclusion LFI in Customer Support System v1 allows attackers to include internal PHP files and gain unauthorized acces via manipulation of the page= parameter at /customersupport/index.php...

6.8AI score0.00766EPSS
SaveExploits1References3
Cvelist
Cvelist
added 2024/03/01 12:0 a.m.26 views

CVE-2023-49545

A directory listing vulnerability in Customer Support System v1 allows attackers to list directories and sensitive files within the application without requiring authorization...

6.6AI score0.00776EPSS
SaveExploits1References3
CVE
CVE
added 2024/03/01 12:0 a.m.77 views

CVE-2023-49544

CVE-2023-49544 describes a Local File Inclusion (LFI) in Customer Support System v1, exploitable via the page= parameter in /customer_support/index.php to include internal PHP files and gain unauthorized access. Documented impact: confidentiality of internal files is H, with no indicated impact o...

4.9CVSS6.8AI score0.00766EPSS
SaveExploits1References3Affected Software1
CVE
CVE
added 2024/03/01 12:0 a.m.76 views

CVE-2023-49545

CVE-2023-49545 affects the Customer Support System v1. The vulnerability is a directory listing flaw that allows an attacker to enumerate directories and sensitive files without requiring authorization. The provided connected sources corroborate this description across multiple feeds (NVD/Red Hat...

7.5CVSS6.6AI score0.00776EPSS
SaveExploits1References3Affected Software1
Vulnrichment
Vulnrichment
added 2024/03/01 12:0 a.m.14 views

CVE-2023-49544

A local file inclusion LFI in Customer Support System v1 allows attackers to include internal PHP files and gain unauthorized acces via manipulation of the page= parameter at /customersupport/index.php...

6.9AI score0.00766EPSS
SaveExploits1References3
CNNVD
CNNVD
added 2024/03/01 12:0 a.m.7 views

Customer Support System Security Breach

Customer Support System is a customer support system by oretnom23 Individual Developer that helps a particular business or company to provide customer support after a customer has purchased a product from them. A security vulnerability exists in Customer Support System v1 that stems from allowing...

7.5CVSS6.7AI score0.00776EPSS
SaveExploits1References4
OSV
OSV
added 2023/12/29 10:15 p.m.8 views

CVE-2023-50071

Sourcecodester Customer Support System 1.0 has multiple SQL injection vulnerabilities in /customersupport/ajax.php?action=savedepartment via id or name...

8.8CVSS5.8AI score0.13754EPSS
SaveExploits6References2
ATTACKERKB
ATTACKERKB
added 2023/12/29 10:15 p.m.9 views

CVE-2023-50071

Sourcecodester Customer Support System 1.0 has multiple SQL injection vulnerabilities in /customersupport/ajax.php?action=savedepartment via id or name...

8.8CVSS7.4AI score0.13754EPSS
SaveExploits6References4
OSV
OSV
added 2023/12/29 10:15 p.m.8 views

CVE-2023-50070

Sourcecodester Customer Support System 1.0 has multiple SQL injection vulnerabilities in /customersupport/ajax.php?action=saveticket via departmentid, customerid, and subject...

8.8CVSS5.8AI score0.00786EPSS
SaveExploits2References2
NVD
NVD
added 2023/12/29 10:15 p.m.23 views

CVE-2023-50070

Sourcecodester Customer Support System 1.0 has multiple SQL injection vulnerabilities in /customersupport/ajax.php?action=saveticket via departmentid, customerid, and subject...

8.8CVSS0.00786EPSS
SaveExploits2References2
Prion
Prion
added 2023/12/29 10:15 p.m.22 views

Sql injection

Sourcecodester Customer Support System 1.0 has multiple SQL injection vulnerabilities in /customersupport/ajax.php?action=saveticket via departmentid, customerid, and subject...

6.5CVSS8.5AI score0.00786EPSS
SaveExploits2References2Affected Software1
Cvelist
Cvelist
added 2023/12/29 12:0 a.m.24 views

CVE-2023-50071

Sourcecodester Customer Support System 1.0 has multiple SQL injection vulnerabilities in /customersupport/ajax.php?action=savedepartment via id or name...

9.5AI score0.13754EPSS
SaveExploits6References2
Rows per page
Query Builder