PT-2023-31468 · Sourcecodester · Sourcecodester Customer Support System

Name of the Vulnerable Software and Affected Versions: Sourcecodester Customer Support System version 1.0 Description: The issue concerns multiple SQL injection vulnerabilities in the /customer support/ajax.php?action=save department endpoint via the id or name variables. This allows for potentia...

Exploit for SQL Injection in Customer_Support_System_Project Customer_Support_System

CVE-2023-50071 Customer Support System 1.0 - Multiple SQL in...

Exploit for SQL Injection in Oretnom23 Customer_Support_System

CVE-2023-50070 Customer Support System 1.0 - Multiple SQL in...

Exploit for Cross-site Scripting in Oretnom23 Customer_Support_System

CVE-2023-49976 Customer Support System 1.0 - XSS Cross-Sit...

Exploit for SQL Injection in Oretnom23 Customer_Support_System

CVE-2023-49547 Customer Support System 1.0 - SQL Injection L...

Exploit for SQL Injection in Oretnom23 Customer_Support_System

CVE-2023-49544 Customer Support System 1.0 - Local File Incl...

Woocommerce Support System <= 1.2.1 - Authenticated (Administrator+) SQL Injection via 'orderby'

Description The Woocommerce Support System plugin for WordPress is vulnerable to SQL Injection via the 'orderby' parameter in versions up to, and including, 1.2.1 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQL query. This makes i...

Woocommerce Support System <= 1.2.1 - Missing Authorization

Description The Woocommerce Support System plugin for WordPress is vulnerable to unauthorized access, modification, and loss of data due to missing capability checks on several functions hook via 'init', 'admininit', and AJAX actions in versions up to, and including, 1.2.1. This makes it possible...

CVE-2023-41685

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in ilGhera Woocommerce Support System allows SQL Injection.This issue affects Woocommerce Support System: from n/a through 1.2.1...

CVE-2023-41685

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in ilGhera Woocommerce Support System allows SQL Injection.This issue affects Woocommerce Support System: from n/a through 1.2.1...

CVE-2023-41685

A vulnerability in ilGhera Woocommerce Support System wc-support-system.This issue affects Woocommerce Support System: from n/a through = 1.2.1...

Sql injection

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in ilGhera Woocommerce Support System allows SQL Injection.This issue affects Woocommerce Support System: from n/a through 1.2.1...

CVE-2023-41685 WordPress Woocommerce Support System Plugin <= 1.2.1 is vulnerable to SQL Injection

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in ilGhera Woocommerce Support System allows SQL Injection.This issue affects Woocommerce Support System: from n/a through 1.2.1...

CVE-2023-41685 WordPress Woocommerce Support System plugin <= 1.2.1 - SQL Injection vulnerability

A vulnerability in ilGhera Woocommerce Support System wc-support-system.This issue affects Woocommerce Support System: from n/a through = 1.2.1...

CVE-2023-41685

CVE-2023-41685 affects the WordPress plugin ilGhera Woocommerce Support System. The vulnerability is an SQL Injection due to improper neutralization of input in the plugin, with affected versions listed as

WordPress Plugin Woocommerce Support System SQL Injection Vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. A SQL injection vulnerability exists in the...

CVE-2023-41685: Improper Neutralization of Special Elements used in an SQL Command

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in ilGhera Woocommerce Support System allows SQL Injection.This issue affects Woocommerce Support System: from n/a through 1.2.1...

PT-2023-28046 · Unknown · Ilghera Woocommerce Support System

Name of the Vulnerable Software and Affected Versions: ilGhera Woocommerce Support System versions 1.2.1 and earlier Description: The issue is related to an SQL Injection vulnerability due to improper neutralization of special elements used in an SQL command. This allows for SQL Injection attacks...

Okta's Recent Customer Support Data Breach Impacted 134 Customers

Identity and authentication management provider Okta on Friday disclosed that the recent support case management system breach affected 134 of its 18,400 customers. It further noted that the unauthorized intruder gained access to its systems from September 28 to October 17, 2023, and ultimately...

Okta's Support System Breach Exposes Customer Data to Unidentified Threat Actors

Identity services provider Okta on Friday disclosed a new security incident that allowed unidentified threat actors to leverage stolen credentials to access its support case management system. "The threat actor was able to view files uploaded by certain Okta customers as part of recent support...