442 matches found
CVE-2023-49548
Customer Support System v1 was discovered to contain a SQL injection vulnerability via the lastname parameter at /customersupport/ajax.php?action=saveuser...
CVE-2023-49548
The Customer Support System version 1.0 contains a SQL injection vulnerability in the lastname parameter at the /customer_support/ajax.php?action=save_user endpoint. The root cause is a lack of validation of externally entered SQL statements, allowing an attacker to execute illegal commands again...
CVE-2023-49968
The Customer Support System v1 (by oretnom23 Personal Developer) contains a SQL injection vulnerability in the id parameter of the /customer_support/manage_department.php page. The root cause is a lack of validation for externally entered SQL statements, which allows an attacker to execute illega...
CVE-2023-49968
Customer Support System v1 was discovered to contain a SQL injection vulnerability via the id parameter at /customersupport/managedepartment.php...
CVE-2023-49546
Customer Support System v1 was discovered to contain a SQL injection vulnerability via the email parameter at /customersupport/ajax.php...
CVE-2023-49546
Customer Support System v1 was discovered to contain a SQL injection vulnerability via the email parameter at /customersupport/ajax.php...
CVE-2023-49970
Customer Support System v1 was discovered to contain a SQL injection vulnerability via the subject parameter at /customersupport/ajax.php?action=saveticket...
CVE-2023-49970
Customer Support System v1 was discovered to contain a SQL injection vulnerability via the subject parameter at /customersupport/ajax.php?action=saveticket...
CVE-2023-49969
The Customer Support System v1 is vulnerable to a SQL injection vulnerability due to a lack of validation of the id parameter at the /customer_support/index.php?page=edit_customer endpoint. An attacker can manipulate this URL parameter to execute illegal SQL commands on the MySQL database , poten...
CVE-2023-49969
Customer Support System v1 was discovered to contain a SQL injection vulnerability via the id parameter at /customersupport/index.php?page=editcustomer...
CVE-2023-49548
Customer Support System v1 was discovered to contain a SQL injection vulnerability via the lastname parameter at /customersupport/ajax.php?action=saveuser...
CVE-2023-49970
The Customer Support System v1 is vulnerable to a SQL injection vulnerability within the subject parameter of the /customer_support/ajax.php?action=save_ticket endpoint. The root cause is a lack of validation for externally entered SQL statements, which allows an attacker to execute illegal comma...
CVE-2023-49544
A local file inclusion LFI in Customer Support System v1 allows attackers to include internal PHP files and gain unauthorized acces via manipulation of the page= parameter at /customersupport/index.php...
CVE-2023-49545
A directory listing vulnerability in Customer Support System v1 allows attackers to list directories and sensitive files within the application without requiring authorization...
CVE-2023-49544
A local file inclusion LFI in Customer Support System v1 allows attackers to include internal PHP files and gain unauthorized acces via manipulation of the page= parameter at /customersupport/index.php...
CVE-2023-49544
A local file inclusion LFI in Customer Support System v1 allows attackers to include internal PHP files and gain unauthorized acces via manipulation of the page= parameter at /customersupport/index.php...
CVE-2023-49545
A directory listing vulnerability in Customer Support System v1 allows attackers to list directories and sensitive files within the application without requiring authorization...
CVE-2023-49545
A directory listing vulnerability in Customer Support System v1 allows attackers to list directories and sensitive files within the application without requiring authorization...
Remote file inclusion
A local file inclusion LFI in Customer Support System v1 allows attackers to include internal PHP files and gain unauthorized acces via manipulation of the page= parameter at /customersupport/index.php...