Lucene search
+L

215 matches found

NVD
NVD
added 2024/03/01 10:15 p.m.30 views

CVE-2023-49545

A directory listing vulnerability in Customer Support System v1 allows attackers to list directories and sensitive files within the application without requiring authorization...

7.5CVSS6.4AI score0.00769EPSS
SaveExploits1References3
ATTACKERKB
ATTACKERKB
added 2024/03/01 10:15 p.m.9 views

CVE-2023-49545

A directory listing vulnerability in Customer Support System v1 allows attackers to list directories and sensitive files within the application without requiring authorization...

7.5CVSS5.8AI score0.00769EPSS
SaveExploits1References4
Prion
Prion
added 2024/03/01 10:15 p.m.24 views

Authorization

A directory listing vulnerability in Customer Support System v1 allows attackers to list directories and sensitive files within the application without requiring authorization...

7AI score0.00769EPSS
SaveExploits1References3
Prion
Prion
added 2024/03/01 10:15 p.m.19 views

Remote file inclusion

A local file inclusion LFI in Customer Support System v1 allows attackers to include internal PHP files and gain unauthorized acces via manipulation of the page= parameter at /customersupport/index.php...

7.2AI score0.00766EPSS
SaveExploits1References3
Cvelist
Cvelist
added 2024/03/01 12:00 a.m.32 views

CVE-2023-49544

A local file inclusion LFI in Customer Support System v1 allows attackers to include internal PHP files and gain unauthorized acces via manipulation of the page= parameter at /customersupport/index.php...

6.8AI score0.00766EPSS
SaveExploits1References3
CVE
CVE
added 2024/03/01 12:00 a.m.86 views

CVE-2023-49544

CVE-2023-49544 describes a Local File Inclusion (LFI) in Customer Support System v1, exploitable via the page= parameter in /customer_support/index.php to include internal PHP files and gain unauthorized access. Documented impact: confidentiality of internal files is H, with no indicated impact o...

4.9CVSS6.8AI score0.00766EPSS
SaveExploits1References3Affected Software1
Cvelist
Cvelist
added 2024/03/01 12:00 a.m.45 views

CVE-2023-49545

A directory listing vulnerability in Customer Support System v1 allows attackers to list directories and sensitive files within the application without requiring authorization...

6.6AI score0.00769EPSS
SaveExploits1References3
CNNVD
CNNVD
added 2024/03/01 12:00 a.m.12 views

Customer Support System Security Breach

Customer Support System is a customer support system by oretnom23 Individual Developer that helps a particular business or company to provide customer support after a customer has purchased a product from them. A security vulnerability exists in Customer Support System v1 that stems from allowing...

7.5CVSS6.7AI score0.00769EPSS
SaveExploits1References4
CVE
CVE
added 2024/03/01 12:00 a.m.83 views

CVE-2023-49545

CVE-2023-49545 affects the Customer Support System v1. The vulnerability is a directory listing flaw that allows an attacker to enumerate directories and sensitive files without requiring authorization. The provided connected sources corroborate this description across multiple feeds (NVD/Red Hat...

7.5CVSS6.6AI score0.00769EPSS
SaveExploits1References3Affected Software1
CNNVD
CNNVD
added 2024/03/01 12:00 a.m.14 views

Customer Support System Security Breach

Customer Support System is a customer support system by oretnom23 Individual Developer that helps a particular business or company to provide customer support after a customer has purchased a product from them. A security vulnerability exists in the v1 version of Customer Support System, which...

4.9CVSS6.8AI score0.00766EPSS
SaveExploits1References4
Vulnrichment
Vulnrichment
added 2024/03/01 12:00 a.m.17 views

CVE-2023-49544

A local file inclusion LFI in Customer Support System v1 allows attackers to include internal PHP files and gain unauthorized acces via manipulation of the page= parameter at /customersupport/index.php...

6.9AI score0.00766EPSS
SaveExploits1References3
ATTACKERKB
ATTACKERKB
added 2023/12/29 10:15 p.m.16 views

CVE-2023-50071

Sourcecodester Customer Support System 1.0 has multiple SQL injection vulnerabilities in /customersupport/ajax.php?action=savedepartment via id or name...

8.8CVSS7.4AI score0.13754EPSS
SaveExploits6References4
OSV
OSV
added 2023/12/29 10:15 p.m.15 views

CVE-2023-50071

Sourcecodester Customer Support System 1.0 has multiple SQL injection vulnerabilities in /customersupport/ajax.php?action=savedepartment via id or name...

8.8CVSS5.8AI score0.13754EPSS
SaveExploits6References2
OSV
OSV
added 2023/12/29 10:15 p.m.13 views

CVE-2023-50070

Sourcecodester Customer Support System 1.0 has multiple SQL injection vulnerabilities in /customersupport/ajax.php?action=saveticket via departmentid, customerid, and subject...

8.8CVSS5.8AI score0.00786EPSS
SaveExploits2References2
NVD
NVD
added 2023/12/29 10:15 p.m.28 views

CVE-2023-50070

Sourcecodester Customer Support System 1.0 has multiple SQL injection vulnerabilities in /customersupport/ajax.php?action=saveticket via departmentid, customerid, and subject...

8.8CVSS0.00786EPSS
SaveExploits2References2
Prion
Prion
added 2023/12/29 10:15 p.m.27 views

Sql injection

Sourcecodester Customer Support System 1.0 has multiple SQL injection vulnerabilities in /customersupport/ajax.php?action=saveticket via departmentid, customerid, and subject...

6.5CVSS8.5AI score0.00786EPSS
SaveExploits2References2Affected Software1
Cvelist
Cvelist
added 2023/12/29 12:00 a.m.34 views

CVE-2023-50071

Sourcecodester Customer Support System 1.0 has multiple SQL injection vulnerabilities in /customersupport/ajax.php?action=savedepartment via id or name...

9.5AI score0.13754EPSS
SaveExploits6References2
Vulnrichment
Vulnrichment
added 2023/12/29 12:00 a.m.14 views

CVE-2023-50071

Sourcecodester Customer Support System 1.0 has multiple SQL injection vulnerabilities in /customersupport/ajax.php?action=savedepartment via id or name...

8.5AI score0.13754EPSS
SaveExploits6References2
CVE
CVE
added 2023/12/29 12:00 a.m.78 views

CVE-2023-50071

CVE-2023-50071 affects Sourcecodester Customer Support System 1.0. The vulnerability is a SQL injection in the endpoint /customer_support/ajax.php?action=save_department, exploitable via the id or name parameter. Multiple public sources confirm the issue, including exploit attempts and weaponized...

8.8CVSS9.2AI score0.13754EPSS
SaveExploits6References2Affected Software1
CNNVD
CNNVD
added 2023/12/29 12:00 a.m.16 views

Customer Support System Security Breach

Customer Support System is a customer support system by oretnom23 Individual Developer that helps a particular business or company to provide customer support after a customer has purchased a product from them. A security vulnerability exists in Customer Support System version 1.0, which stems fr...

8.8CVSS7.8AI score0.13754EPSS
SaveExploits6References3
Rows per page
Query Builder