CVE-2023-49548

CVE-2023-49548 Customer Support System 1.0 - SQL Injection Vulnerability in the "lastname" Parameter During "saveuser" Operation Description : A SQL Injection vulnerability exists in version 1 of the Customer Support System. A malicious attacker can issue SQL commands to the MySQL database when...

CVE-2023-49971

CVE-2023-49971 Customer Support System 1.0 - Cross-Site Scripting XSS Vulnerability in "firstname" field/parameter on "customerlist" Page Description : Customer Support System 1.0 is vulnerable to stored XSS. A XSS vulnerability exists in version 1 of the Customer Support System. A malicious acto...

CVE-2023-49546

CVE-2023-49546 Customer Support System 1.0 - SQL Injection Vulnerability in the "email" Parameter During "savestaff" Operation Description : A SQL Injection vulnerability exists in version 1 of the Customer Support System. A malicious attacker can issue SQL commands to the MySQL database when...

CVE-2023-49974

CVE-2023-49974 Customer Support System 1.0 - Cross-Site Scripting XSS Vulnerability in "contact" field/parameter on "customerlist" Page Description : Customer Support System 1.0 is vulnerable to stored XSS. A XSS vulnerability exists in version 1 of the Customer Support System. A malicious actor...

CVE-2023-50070

CVE-2023-50070 Customer Support System 1.0 - Multiple SQL injection vulnerabilities - saveticket Description : Multiple SQL injection vulnerabilities in /customersupport/ajax.php?action=saveticket in Customer Support System 1.0 allow authenticated attackers to execute arbitrary SQL commands via...

CVE-2023-49976

CVE-2023-49976 Customer Support System 1.0 - XSS Cross-Site Scripting Vulnerability in the "subject" at "ticketlist" Description : Customer Support System 1.0 is vulnerable to stored XSS. A XSS vulnerability exists in version 1 of the Customer Support System. A malicious actor can insert JavaScri...

CVE-2023-49973

CVE-2023-49973 Customer Support System 1.0 - "customerlist"页面"email"字段/参数中的跨站脚本XSS漏洞 描述 : Customer Support System 1.0 存在存储型XSS漏洞。在Customer Support System版本1中，存在一个XSS漏洞。恶意攻击者可以在编辑/创建客户时通过"email"字段/参数插入JavaScript代码。每当访问页面"/customersupport/index.php?page=customerlist"时，该代码就会被执行。 受影响的产品版本 : Customer...

CVE-2023-49977

CVE-2023-49977 Customer Support System 1.0 - Vulnerabilidad de Cross-Site Scripting XSS en el campo/parámetro "Address" de la página "customerlist" Descripción : Customer Support System 1.0 es vulnerable a XSS almacenado. Existe una vulnerabilidad XSS en la versión 1 de Customer Support System. U...

CVE-2023-51281

CVE-2023-51281 Customer Support System 1.0 - Multiple Cross-Site Scripting XSS Vulnerability in “firstname”, "lastname", "middlename", "contact" or “address” parameters Description : Multiple cross-site scripting XSS vulnerabilities in /customersupport/ajax.php?action=savecustomer in Customer...

CVE-2023-49544

CVE-2023-49544 Customer Support System 1.0 - Local File Inclusion Description : Customer Support System 1.0 is vulnerable to Local File Inclusion. An authenticated user has the capability to access and read PHP files from the operating system by exploiting a Local File Inclusion LFI vulnerability...

CVE-2023-49978

CVE-2023-49978 Customer Support System 1.0 - Incorrect Access Control Description : Incorrect access control in Customer Support System v1 allows non-administrator users to access administrative pages and execute actions reserved for administrators. Vulnerable Product Version : Customer Support...

CVE-2023-49545

CVE-2023-49545 Customer Support System 1.0 - Directory Listing Description : A directory listing vulnerability in Customer Support System v1 allows attackers to list directories and sensitive files within the application without requiring authentication/authorization. Vulnerable Product Version :...

CVE-2023-49969

CVE-2023-49969 Customer Support System 1.0 - 通过“id” URL参数在 editcustomer 中的 SQL 注入漏洞 描述 ：Customer Support System 版本 1 存在 SQL 注入漏洞。具有恶意意图的攻击者可以在编辑客户时，通过操纵 'id' URL 参数来对 MySQL 数据库执行 SQL 命令。 受影响的产品版本 ：Customer Support System 1.0 CVE 作者 ：Geraldo Alcântara 日期 ：2023年11月28日 确认时间 ：2023年12月19日 CVE...

CVE-2023-49547

CVE-2023-49547 Customer Support System 1.0 - SQL Injection Login Bypass Description : Customer Support System is vulnerable 1.0 to SQL Injection. A SQL injection vulnerability in Customer Support System 1.0 enables remote, unauthenticated attackers to bypass the authentication process by exploiti...

CVE-2023-49970

CVE-2023-49970 Customer Support System 1.0 - 在"saveticket"操作期间"subject"参数存在SQL注入漏洞 描述 ：Customer Support System 1.0版本存在SQL注入漏洞。恶意攻击者在创建/编辑工单时，可通过易受攻击的参数“subject”向MySQL数据库发送SQL命令。 受影响产品版本 ：Customer Support System 1.0 CVE作者 ：Geraldo Alcântara 日期 ：2023年11月28日 确认日期 ：2023年12月19日 CVE编号 ：CVE-2023-49970...

CVE-2023-49968

CVE-2023-49968 Customer Support System 1.0 - Vulnerabilidad de Inyección SQL en managedepartment.php a través del parámetro URL 'id' Description : Existe una vulnerabilidad de Inyección SQL en la versión 1 del Customer Support System. Un atacante con intenciones maliciosas puede ejecutar comandos...

CVE-2023-50071

CVE-2023-50071 Customer Support System 1.0 - Múltiples vulnerabilidades de inyección SQL - savedepartment Descripción : Múltiples vulnerabilidades de inyección SQL en /customersupport/ajax.php?action=savedepartment en Customer Support System 1.0 permiten a atacantes autenticados ejecutar comandos...

EUVD-2026-47143

Vulnerability in the Oracle Customer Support product of Oracle E-Business Suite component: Update Service Request. Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Customer...

CVE-2026-60844

Vulnerability in the Oracle Customer Support product of Oracle E-Business Suite component: Update Service Request. Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Customer...

PT-2026-62820

Vulnerability in the Oracle Customer Support product of Oracle E-Business Suite component: Update Service Request. Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Customer...