260 matches found
PT-2023-31430
Name of the Vulnerable Software and Affected Versions Customer Support System version v1 Description The issue is related to a SQL injection vulnerability. This vulnerability can be exploited via the subject parameter at the "/customer support/ajax.php?action=save ticket" API endpoint...
PT-2023-31437 · Unknown · Customer Support System
Name of the Vulnerable Software and Affected Versions: Customer Support System version v1 Description: A directory listing issue allows attackers to list directories and sensitive files within the application without requiring authorization. Recommendations: For Customer Support System version v1...
PT-2023-31254
Name of the Vulnerable Software and Affected Versions Customer Support System version v1 Description A directory listing issue allows attackers to list directories and sensitive files within the application without requiring authorization. Recommendations For Customer Support System version v1,...
PT-2023-31431 · Unknown · Customer Support System
Name of the Vulnerable Software and Affected Versions: Customer Support System version v1 Description: A cross-site scripting XSS issue allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the firstname parameter at "/customer support/index.php?page=custom...
Exploit for SQL Injection in Oretnom23 Customer_Support_System
CVE-2023-49970 Customer Support System 1.0 - SQL Injection V...
Exploit for SQL Injection in Oretnom23 Customer_Support_System
CVE-2023-49969 Customer Support System 1.0 - SQL Injection V...
Exploit for SQL Injection in Oretnom23 Customer_Support_System
CVE-2023-49968 Customer Support System 1.0 - SQL Injection V...
Exploit for SQL Injection in Oretnom23 Customer_Support_System
CVE-2023-49548 Customer Support System 1.0 - SQL Injection V...
Exploit for SQL Injection in Oretnom23 Customer_Support_System
CVE-2023-49546 Customer Support System 1.0 - SQL Injection V...
Exploit for SQL Injection in Customer_Support_System_Project Customer_Support_System
CVE-2023-50071 Customer Support System 1.0 - Multiple SQL in...
Exploit for SQL Injection in Oretnom23 Customer_Support_System
CVE-2023-50070 Customer Support System 1.0 - Multiple SQL in...
Exploit for Cross-site Scripting in Oretnom23 Customer_Support_System
CVE-2023-49976 Customer Support System 1.0 - XSS Cross-Sit...
Exploit for SQL Injection in Oretnom23 Customer_Support_System
CVE-2023-49547 Customer Support System 1.0 - SQL Injection L...
Exploit for SQL Injection in Oretnom23 Customer_Support_System
CVE-2023-49544 Customer Support System 1.0 - Local File Incl...
Customer Support System 1.0 Cross Site Scripting
Exploit Title: Customer Support System 1.0 - "First Name" & "Last Name" Stored XSS Exploit Author: Saeed Bala Ahmed r0b0tG4nG Date: 2020-12-11 Google Dork: N/A Vendor Homepage: https://www.sourcecodester.com/php/14587/customer-support-system-using-phpmysqli-source-code.html Software Link:...
Customer Support System 1.0 - _First Name_ & _Last Name_ Stored XSS
Exploit Title: Customer Support System 1.0 - "First Name" & "Last Name" Stored XSS Exploit Author: Saeed Bala Ahmed r0b0tG4nG Date: 2020-12-11 Google Dork: N/A Vendor Homepage: https://www.sourcecodester.com/php/14587/customer-support-system-using-phpmysqli-source-code.html Software Link:...
Customer Support System 1.0 SQL Injection
Title: Customer Support System 1.0 - Authentication Bypass Date: 2020-11-11 Exploit Author: Ahmed Abbas Vendor Homepage: https://www.sourcecodester.com/php/14587/customer-support-system-using-phpmysqli-source-code.html Software Link:...
Customer Support System 1.0 Cross Site Scripting
Exploit Title: Customer Support System 1.0 - Stored XSS in The Admin Panel Date: 2020-11-11 Exploit Author: Ahmed Abbas Vendor Homepage: https://www.sourcecodester.com/php/14587/customer-support-system-using-phpmysqli-source-code.html Software Link:...
Customer Support System 1.0 - 'username' Authentication Bypass
Title: Customer Support System 1.0 - 'username' Authentication Bypass Date: 2020-11-11 Exploit Author: Ahmed Abbas Vendor Homepage: https://www.sourcecodester.com/php/14587/customer-support-system-using-phpmysqli-source-code.html Software Link:...
Customer Support System 1.0 - 'description' Stored XSS in The Admin Panel
Exploit Title: Customer Support System 1.0 - 'description' Stored XSS in The Admin Panel Date: 2020-11-11 Exploit Author: Ahmed Abbas Vendor Homepage: https://www.sourcecodester.com/php/14587/customer-support-system-using-phpmysqli-source-code.html Software Link:...