Lucene search
+L

215 matches found

NVD
NVD
•added 2024/03/01 10:15 p.m.•31 views

CVE-2023-49545

A directory listing vulnerability in Customer Support System v1 allows attackers to list directories and sensitive files within the application without requiring authorization...

7.5CVSS6.4AI score0.00769EPSS
SaveExploits1References3
attackerkb
attackerkb
•added 2024/03/01 10:15 p.m.•11 views

CVE-2023-49545

A directory listing vulnerability in Customer Support System v1 allows attackers to list directories and sensitive files within the application without requiring authorization...

7.5CVSS5.8AI score0.00769EPSS
SaveExploits1References4
Prion
Prion
•added 2024/03/01 10:15 p.m.•25 views

Authorization

A directory listing vulnerability in Customer Support System v1 allows attackers to list directories and sensitive files within the application without requiring authorization...

7AI score0.00769EPSS
SaveExploits1References3
Prion
Prion
•added 2024/03/01 10:15 p.m.•21 views

Remote file inclusion

A local file inclusion LFI in Customer Support System v1 allows attackers to include internal PHP files and gain unauthorized acces via manipulation of the page= parameter at /customersupport/index.php...

7.2AI score0.00734EPSS
SaveExploits1References3
CVE
CVE
•added 2024/03/01 12:00 a.m.•90 views

CVE-2023-49544

Customer Support System v1 is vulnerable to a Local File Inclusion (LFI) flaw due to insufficient validation of the page= parameter at the /customer_support/index.php endpoint. An authenticated user can manipulate this parameter to include and read internal PHP files from the operating system. A ...

6.8AI score0.00734EPSS
SaveExploits1References3Affected Software1
Cvelist
Cvelist
•added 2024/03/01 12:00 a.m.•34 views

CVE-2023-49544

A local file inclusion LFI in Customer Support System v1 allows attackers to include internal PHP files and gain unauthorized acces via manipulation of the page= parameter at /customersupport/index.php...

6.8AI score0.00734EPSS
SaveExploits1References3
CNNVD
CNNVD
•added 2024/03/01 12:00 a.m.•13 views

Customer Support System Security Breach

Customer Support System is a customer support system by oretnom23 Individual Developer that helps a particular business or company to provide customer support after a customer has purchased a product from them. A security vulnerability exists in Customer Support System v1 that stems from allowing...

7.5CVSS6.7AI score0.00769EPSS
SaveExploits1References4
CVE
CVE
•added 2024/03/01 12:00 a.m.•88 views

CVE-2023-49545

The Customer Support System v1 is affected by a directory listing vulnerability that allows unauthenticated attackers to view directories and sensitive files within the application. Specifically, attackers can access the /customer_support/database/ and /customer_support/assets/ directories to ret...

6.6AI score0.00769EPSS
SaveExploits1References3Affected Software1
Cvelist
Cvelist
•added 2024/03/01 12:00 a.m.•47 views

CVE-2023-49545

A directory listing vulnerability in Customer Support System v1 allows attackers to list directories and sensitive files within the application without requiring authorization...

6.6AI score0.00769EPSS
SaveExploits1References3
CNNVD
CNNVD
•added 2024/03/01 12:00 a.m.•15 views

Customer Support System Security Breach

Customer Support System is a customer support system by oretnom23 Individual Developer that helps a particular business or company to provide customer support after a customer has purchased a product from them. A security vulnerability exists in the v1 version of Customer Support System, which...

4.9CVSS6.8AI score0.00734EPSS
SaveExploits1References4
Vulnrichment
Vulnrichment
•added 2024/03/01 12:00 a.m.•17 views

CVE-2023-49544

A local file inclusion LFI in Customer Support System v1 allows attackers to include internal PHP files and gain unauthorized acces via manipulation of the page= parameter at /customersupport/index.php...

6.9AI score0.00734EPSS
SaveExploits1References3
attackerkb
attackerkb
•added 2023/12/29 10:15 p.m.•18 views

CVE-2023-50071

Sourcecodester Customer Support System 1.0 has multiple SQL injection vulnerabilities in /customersupport/ajax.php?action=savedepartment via id or name...

8.8CVSS7.4AI score0.13754EPSS
SaveExploits6References4
OSV
OSV
•added 2023/12/29 10:15 p.m.•17 views

CVE-2023-50071

Sourcecodester Customer Support System 1.0 has multiple SQL injection vulnerabilities in /customersupport/ajax.php?action=savedepartment via id or name...

8.8CVSS5.8AI score0.13754EPSS
SaveExploits6References2
OSV
OSV
•added 2023/12/29 10:15 p.m.•17 views

CVE-2023-50070

Sourcecodester Customer Support System 1.0 has multiple SQL injection vulnerabilities in /customersupport/ajax.php?action=saveticket via departmentid, customerid, and subject...

8.8CVSS5.8AI score0.00786EPSS
SaveExploits2References2
NVD
NVD
•added 2023/12/29 10:15 p.m.•32 views

CVE-2023-50070

Sourcecodester Customer Support System 1.0 has multiple SQL injection vulnerabilities in /customersupport/ajax.php?action=saveticket via departmentid, customerid, and subject...

8.8CVSS0.00786EPSS
SaveExploits2References2
Prion
Prion
•added 2023/12/29 10:15 p.m.•31 views

Sql injection

Sourcecodester Customer Support System 1.0 has multiple SQL injection vulnerabilities in /customersupport/ajax.php?action=saveticket via departmentid, customerid, and subject...

6.5CVSS8.5AI score0.00786EPSS
SaveExploits2References2Affected Software1
Vulnrichment
Vulnrichment
•added 2023/12/29 12:00 a.m.•14 views

CVE-2023-50071

Sourcecodester Customer Support System 1.0 has multiple SQL injection vulnerabilities in /customersupport/ajax.php?action=savedepartment via id or name...

8.5AI score0.13754EPSS
SaveExploits6References2
Cvelist
Cvelist
•added 2023/12/29 12:00 a.m.•37 views

CVE-2023-50071

Sourcecodester Customer Support System 1.0 has multiple SQL injection vulnerabilities in /customersupport/ajax.php?action=savedepartment via id or name...

9.5AI score0.13754EPSS
SaveExploits6References2
CVE
CVE
•added 2023/12/29 12:00 a.m.•84 views

CVE-2023-50071

CVE-2023-50071 affects Sourcecodester Customer Support System 1.0. The vulnerability is a SQL injection in the endpoint /customer_support/ajax.php?action=save_department, exploitable via the id or name parameter. Multiple public sources confirm the issue, including exploit attempts and weaponized...

8.8CVSS9.2AI score0.13754EPSS
SaveExploits6References2Affected Software1
CNNVD
CNNVD
•added 2023/12/29 12:00 a.m.•18 views

Customer Support System Security Breach

Customer Support System is a customer support system by oretnom23 Individual Developer that helps a particular business or company to provide customer support after a customer has purchased a product from them. A security vulnerability exists in Customer Support System version 1.0, which stems fr...

8.8CVSS7.8AI score0.13754EPSS
SaveExploits6References3
Rows per page
Query Builder