Lucene search
+L

348 matches found

CNVD
CNVD
•added 2024/03/08 12:00 a.m.•55 views

Customer Support System SQL Injection Vulnerability (CNVD-2024-14031)

Customer Support System is a customer support system by oretnom23 Personal Developer that helps a particular business or company to provide customer support after a customer has purchased a product from them. Customer Support System suffers from a SQL injection vulnerability that originates from...

8.8CVSS8.1AI score0.00755EPSS
SaveExploits2References1
CNVD
CNVD
•added 2024/03/08 12:00 a.m.•29 views

Customer Support System SQL Injection Vulnerability (CNVD-2024-14034)

Customer Support System is a customer support system by oretnom23 Personal Developer that helps a particular business or company to provide customer support after a customer has purchased a product from them. Customer Support System suffers from a SQL injection vulnerability that stems from a lac...

7.3CVSS7.8AI score0.00456EPSS
SaveExploits2References1
attackerkb
attackerkb
•added 2024/03/07 1:15 a.m.•11 views

CVE-2023-51281

Cross Site Scripting vulnerability in Customer Support System v.1.0 allows a remote attacker to escalate privileges via a crafted script firstname, "lastname", "middlename", "contact" and address parameters...

5.4CVSS5.8AI score0.00478EPSS
SaveExploits2References3
NVD
NVD
•added 2024/03/07 1:15 a.m.•23 views

CVE-2023-51281

Cross Site Scripting vulnerability in Customer Support System v.1.0 allows a remote attacker to escalate privileges via a crafted script firstname, "lastname", "middlename", "contact" and address parameters...

5.4CVSS6.4AI score0.00478EPSS
SaveExploits2References2
OSV
OSV
•added 2024/03/07 1:15 a.m.•19 views

CVE-2023-51281

Cross Site Scripting vulnerability in Customer Support System v.1.0 allows a remote attacker to escalate privileges via a crafted script firstname, "lastname", "middlename", "contact" and address parameters...

5.4CVSS5.8AI score0.00478EPSS
SaveExploits2References2
Prion
Prion
•added 2024/03/07 1:15 a.m.•31 views

Cross site scripting

Cross Site Scripting vulnerability in Customer Support System v.1.0 allows a remote attacker to escalate privileges via a crafted script firstname, "lastname", "middlename", "contact" and address parameters...

7AI score0.00478EPSS
SaveExploits2References2
Vulnrichment
Vulnrichment
•added 2024/03/07 12:00 a.m.•14 views

CVE-2023-51281

Cross Site Scripting vulnerability in Customer Support System v.1.0 allows a remote attacker to escalate privileges via a crafted script firstname, "lastname", "middlename", "contact" and address parameters...

6.7AI score0.00478EPSS
SaveExploits2References2
CVE
CVE
•added 2024/03/07 12:00 a.m.•74 views

CVE-2023-51281

The Customer Support System v.1.0 is vulnerable to a Cross-Site Scripting (XSS) vulnerability. Authenticated attackers can execute arbitrary web scripts or HTML by injecting a manipulated payload into the firstname , lastname , middlename , contact , or address parameters via the /customer_suppor...

5.4CVSS6.6AI score0.00478EPSS
SaveExploits2References2Affected Software1
Positive Technologies
Positive Technologies
•added 2024/03/07 12:00 a.m.•7 views

PT-2024-14081

Name of the Vulnerable Software and Affected Versions Customer Support System version 1.0 Description The issue allows a remote attacker to escalate privileges via a crafted script using parameters such as firstname, lastname, middlename, contact, and address. Recommendations For Customer Support...

5.4CVSS0.00478EPSS
SaveExploits2References8
CNNVD
CNNVD
•added 2024/03/07 12:00 a.m.•19 views

Customer Support System Security Breach

Customer Support System is a customer support system by oretnom23 Individual Developer that helps a particular business or company to provide customer support after a customer has purchased a product from them. A security vulnerability exists in Customer Support System version v.1.0. An attacker...

5.4CVSS7AI score0.00478EPSS
SaveExploits2References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/03/07 12:00 a.m.•6 views

CVE-2023-51281: Improper Neutralization of Input During Web Page Generation

Cross Site Scripting vulnerability in Customer Support System v.1.0 allows a remote attacker to escalate privileges via a crafted script firstname, "lastname", "middlename", "contact" and address parameters...

5.4CVSS5.9AI score0.00478EPSS
SaveExploits2References2
Cvelist
Cvelist
•added 2024/03/07 12:00 a.m.•38 views

CVE-2023-51281

Cross Site Scripting vulnerability in Customer Support System v.1.0 allows a remote attacker to escalate privileges via a crafted script firstname, "lastname", "middlename", "contact" and address parameters...

6.6AI score0.00478EPSS
SaveExploits2References2
OSV
OSV
•added 2024/03/06 1:15 a.m.•16 views

CVE-2023-49974

A cross-site scripting XSS vulnerability in Customer Support System v1 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the contact parameter at /customersupport/index.php?page=customerlist...

6.1CVSS5.9AI score0.0045EPSS
SaveExploits2References2
attackerkb
attackerkb
•added 2024/03/06 1:15 a.m.•17 views

CVE-2023-49976

A cross-site scripting XSS vulnerability in Customer Support System v1 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the subject parameter at /customersupport/index.php?page=newticket...

5.4CVSS6.2AI score0.00466EPSS
SaveExploits5References3
OSV
OSV
•added 2024/03/06 1:15 a.m.•20 views

CVE-2023-49973

A cross-site scripting XSS vulnerability in Customer Support System v1 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the email parameter at /customersupport/index.php?page=customerlist...

6.1CVSS5.9AI score0.0045EPSS
SaveExploits1References2
attackerkb
attackerkb
•added 2024/03/06 1:15 a.m.•33 views

CVE-2023-49973

A cross-site scripting XSS vulnerability in Customer Support System v1 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the email parameter at /customersupport/index.php?page=customerlist...

6.1CVSS6AI score0.0045EPSS
SaveExploits1References3
OSV
OSV
•added 2024/03/06 1:15 a.m.•16 views

CVE-2023-49976

A cross-site scripting XSS vulnerability in Customer Support System v1 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the subject parameter at /customersupport/index.php?page=newticket...

5.4CVSS5.9AI score0.00466EPSS
SaveExploits5References2
attackerkb
attackerkb
•added 2024/03/06 1:15 a.m.•11 views

CVE-2023-49971

A cross-site scripting XSS vulnerability in Customer Support System v1 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the firstname parameter at /customersupport/index.php?page=customerlist...

6.1CVSS6AI score0.00433EPSS
SaveExploits1References3
OSV
OSV
•added 2024/03/06 1:15 a.m.•17 views

CVE-2023-49971

A cross-site scripting XSS vulnerability in Customer Support System v1 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the firstname parameter at /customersupport/index.php?page=customerlist...

6.1CVSS5.9AI score0.00433EPSS
SaveExploits1References2
OSV
OSV
•added 2024/03/06 1:15 a.m.•20 views

CVE-2023-49977

A cross-site scripting XSS vulnerability in Customer Support System v1 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the address parameter at /customersupport/index.php?page=newcustomer...

5.4CVSS5.9AI score0.0045EPSS
SaveExploits2References2
Rows per page
Query Builder