348 matches found
PT-2023-31430
Name of the Vulnerable Software and Affected Versions Customer Support System version v1 Description The issue is related to a SQL injection vulnerability. This vulnerability can be exploited via the subject parameter at the "/customer support/ajax.php?action=save ticket" API endpoint...
PT-2023-31428
Name of the Vulnerable Software and Affected Versions Customer Support System version v1 Description The issue is related to a SQL injection vulnerability. This vulnerability can be exploited via the id parameter at the "/customer support/index.php?page=edit customer" API endpoint. Recommendation...
PT-2023-31427
Name of the Vulnerable Software and Affected Versions Customer Support System version v1 Description The issue is related to a SQL injection vulnerability. This vulnerability can be exploited via the id parameter at the "/customer support/manage department.php" API endpoint. Recommendations For...
PT-2023-31256
Name of the Vulnerable Software and Affected Versions Customer Support System version v1 Description The issue is related to a SQL injection vulnerability. This vulnerability can be exploited via the username parameter at the "/customer support/ajax.php?action=login" API endpoint. Recommendations...
PT-2023-31255
Name of the Vulnerable Software and Affected Versions Customer Support System version v1 Description The issue is related to a SQL injection vulnerability. This vulnerability can be exploited via the email parameter at the "/customer support/ajax.php" API endpoint. Recommendations For Customer...
PT-2023-31436 · Unknown · Customer Support System
Name of the Vulnerable Software and Affected Versions: Customer Support System version v1 Description: The issue is related to incorrect access control, allowing non-administrator users to access administrative pages and execute actions that are supposed to be reserved for administrators...
PT-2023-31431 · Unknown · Customer Support System
Name of the Vulnerable Software and Affected Versions: Customer Support System version v1 Description: A cross-site scripting XSS issue allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the firstname parameter at "/customer support/index.php?page=custom...
PT-2023-31432 · Unknown · Customer Support System
Name of the Vulnerable Software and Affected Versions: Customer Support System version v1 Description: A cross-site scripting XSS issue allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the email parameter at "/customer support/index.php?page=customer...
PT-2023-31435
Name of the Vulnerable Software and Affected Versions Customer Support System version v1 Description A cross-site scripting XSS issue allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the address parameter at "/customer support/index.php?page=new...
PT-2023-31254
Name of the Vulnerable Software and Affected Versions Customer Support System version v1 Description A directory listing issue allows attackers to list directories and sensitive files within the application without requiring authorization. Recommendations For Customer Support System version v1,...
PT-2023-31253
Name of the Vulnerable Software and Affected Versions Customer Support System version v1 Description A local file inclusion issue allows attackers to include internal PHP files and gain unauthorized access by manipulating the page parameter at the "/customer support/index.php" API endpoint...
PT-2023-31433
Name of the Vulnerable Software and Affected Versions Customer Support System version v1 Description A cross-site scripting XSS issue allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the contact parameter at "/customer support/index.php?page=customer...
PT-2023-31257
Name of the Vulnerable Software and Affected Versions Customer Support System version v1 Description The issue is related to a SQL injection vulnerability. This vulnerability can be exploited via the lastname parameter at the "/customer support/ajax.php?action=save user" API endpoint...
PT-2023-31434
Name of the Vulnerable Software and Affected Versions Customer Support System version v1 Description A cross-site scripting XSS issue allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the subject parameter at "/customer support/index.php?page=new ticket...
PT-2023-31437 · Unknown · Customer Support System
Name of the Vulnerable Software and Affected Versions: Customer Support System version v1 Description: A directory listing issue allows attackers to list directories and sensitive files within the application without requiring authorization. Recommendations: For Customer Support System version v1...
Exploit for SQL Injection in Oretnom23 Customer_Support_System
CVE-2023-49970 Customer Support System 1.0 - SQL Injection V...
Exploit for SQL Injection in Oretnom23 Customer_Support_System
CVE-2023-49969 Customer Support System 1.0 - SQL Injection V...
Exploit for SQL Injection in Oretnom23 Customer_Support_System
CVE-2023-49968 Customer Support System 1.0 - SQL Injection V...