PT-2023-31433

Name of the Vulnerable Software and Affected Versions Customer Support System version v1 Description A cross-site scripting XSS issue allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the contact parameter at "/customer support/index.php?page=customer...

PT-2023-31434

Name of the Vulnerable Software and Affected Versions Customer Support System version v1 Description A cross-site scripting XSS issue allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the subject parameter at "/customer support/index.php?page=new ticket...

PT-2023-31257

Name of the Vulnerable Software and Affected Versions Customer Support System version v1 Description The issue is related to a SQL injection vulnerability. This vulnerability can be exploited via the lastname parameter at the "/customer support/ajax.php?action=save user" API endpoint...

PT-2023-31254

Name of the Vulnerable Software and Affected Versions Customer Support System version v1 Description A directory listing issue allows attackers to list directories and sensitive files within the application without requiring authorization. Recommendations For Customer Support System version v1,...

Exploit for SQL Injection in Oretnom23 Customer_Support_System

CVE-2023-49970 Customer Support System 1.0 - SQL Injection V...

Exploit for SQL Injection in Oretnom23 Customer_Support_System

CVE-2023-49969 Customer Support System 1.0 - SQL Injection V...

Exploit for SQL Injection in Oretnom23 Customer_Support_System

CVE-2023-49968 Customer Support System 1.0 - SQL Injection V...

Exploit for SQL Injection in Oretnom23 Customer_Support_System

CVE-2023-49548 Customer Support System 1.0 - SQL Injection V...

Exploit for SQL Injection in Oretnom23 Customer_Support_System

CVE-2023-49546 Customer Support System 1.0 - SQL Injection V...

Exploit for SQL Injection in Customer_Support_System_Project Customer_Support_System

CVE-2023-50071 Customer Support System 1.0 - Multiple SQL in...

Exploit for SQL Injection in Oretnom23 Customer_Support_System

CVE-2023-50070 Customer Support System 1.0 - Multiple SQL in...

Exploit for Cross-site Scripting in Oretnom23 Customer_Support_System

CVE-2023-49976 Customer Support System 1.0 - XSS Cross-Sit...

Exploit for SQL Injection in Oretnom23 Customer_Support_System

CVE-2023-49547 Customer Support System 1.0 - SQL Injection L...

Exploit for SQL Injection in Oretnom23 Customer_Support_System

CVE-2023-49544 Customer Support System 1.0 - Local File Incl...

Customer Support System 1.0 Cross Site Scripting

Exploit Title: Customer Support System 1.0 - "First Name" & "Last Name" Stored XSS Exploit Author: Saeed Bala Ahmed r0b0tG4nG Date: 2020-12-11 Google Dork: N/A Vendor Homepage: https://www.sourcecodester.com/php/14587/customer-support-system-using-phpmysqli-source-code.html Software Link:...

Customer Support System 1.0 - _First Name_ & _Last Name_ Stored XSS

Exploit Title: Customer Support System 1.0 - "First Name" & "Last Name" Stored XSS Exploit Author: Saeed Bala Ahmed r0b0tG4nG Date: 2020-12-11 Google Dork: N/A Vendor Homepage: https://www.sourcecodester.com/php/14587/customer-support-system-using-phpmysqli-source-code.html Software Link:...

Customer Support System 1.0 SQL Injection

Title: Customer Support System 1.0 - Authentication Bypass Date: 2020-11-11 Exploit Author: Ahmed Abbas Vendor Homepage: https://www.sourcecodester.com/php/14587/customer-support-system-using-phpmysqli-source-code.html Software Link:...

Customer Support System 1.0 Cross Site Scripting

Exploit Title: Customer Support System 1.0 - Stored XSS in The Admin Panel Date: 2020-11-11 Exploit Author: Ahmed Abbas Vendor Homepage: https://www.sourcecodester.com/php/14587/customer-support-system-using-phpmysqli-source-code.html Software Link:...

Customer Support System 1.0 - 'description' Stored XSS in The Admin Panel

Exploit Title: Customer Support System 1.0 - 'description' Stored XSS in The Admin Panel Date: 2020-11-11 Exploit Author: Ahmed Abbas Vendor Homepage: https://www.sourcecodester.com/php/14587/customer-support-system-using-phpmysqli-source-code.html Software Link:...

Customer Support System 1.0 - 'username' Authentication Bypass

Title: Customer Support System 1.0 - 'username' Authentication Bypass Date: 2020-11-11 Exploit Author: Ahmed Abbas Vendor Homepage: https://www.sourcecodester.com/php/14587/customer-support-system-using-phpmysqli-source-code.html Software Link:...