CVE-2023-50071: Improper Neutralization of Special Elements used in an SQL Command

Sourcecodester Customer Support System 1.0 has multiple SQL injection vulnerabilities in /customersupport/ajax.php?action=savedepartment via id or name...

WordPress Customer Reviews for WooCommerce Plugin <= 5.38.1 is vulnerable to Broken Access Control

Software Customer Reviews for WooCommerce Type Plugin Vulnerable versions = 5.38.1 Fixed in 5.38.2 OWASP Top 10 A1: Broken Access Control Classification Broken Access Control CVE CVE-2023-51692 Patch priority Low CVSS severity Low 4.3 Developer Claim ownership PSID e11a8c8a789f Credits Abdi Prana...

PT-2023-27343 · Pexip · Pexip Vmr

Name of the Vulnerable Software and Affected Versions: Pexip VMR self-service portal versions prior to 3 Description: The issue allows authentication bypass due to the use of the same SSH host key across different customers' installations. Recommendations: For versions prior to 3, update to versi...

Adobe Real-Time CDP: Personalized Customer Experience

By Owais Sultan In the current high-tech age, consumer data is a businesss most important asset as they progressively shifts towards… This is a post from HackRead.com Read the original post: Adobe Real-Time CDP: Personalized Customer Experience...

Exploit for CVE-2023-51281

CVE-2023-51281 Customer Support System 1.0 - Multiple Cross-...

Comcast’s Xfinity breached by Citrix Bleed; 36 million customer’s data accessed

In a notice for its customers, Xfinity acknowledges it recently fell victim to a data security incident. Xfinity is Comcasts brand for TV, internet, and home phone services, sometimes referred to as Comcast Cable Communications. During the data breach the attackers were able to access 35.8 millio...

Exploit for Cross-site Scripting in Oretnom23 Customer_Support_System

CVE-2023-49977 Customer Support System 1.0 - Cross-Site Scri...

Exploit for Cross-site Scripting in Oretnom23 Customer_Support_System

CVE-2023-49974 Customer Support System 1.0 - Cross-Site Scri...

PT-2023-31430

Name of the Vulnerable Software and Affected Versions Customer Support System version v1 Description The issue is related to a SQL injection vulnerability. This vulnerability can be exploited via the subject parameter at the "/customer support/ajax.php?action=save ticket" API endpoint...

PT-2023-31428

Name of the Vulnerable Software and Affected Versions Customer Support System version v1 Description The issue is related to a SQL injection vulnerability. This vulnerability can be exploited via the id parameter at the "/customer support/index.php?page=edit customer" API endpoint. Recommendation...

PT-2023-31436 · Unknown · Customer Support System

Name of the Vulnerable Software and Affected Versions: Customer Support System version v1 Description: The issue is related to incorrect access control, allowing non-administrator users to access administrative pages and execute actions that are supposed to be reserved for administrators...

PT-2023-31431 · Unknown · Customer Support System

Name of the Vulnerable Software and Affected Versions: Customer Support System version v1 Description: A cross-site scripting XSS issue allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the firstname parameter at "/customer support/index.php?page=custom...

PT-2023-31432 · Unknown · Customer Support System

Name of the Vulnerable Software and Affected Versions: Customer Support System version v1 Description: A cross-site scripting XSS issue allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the email parameter at "/customer support/index.php?page=customer...

PT-2023-31254

Name of the Vulnerable Software and Affected Versions Customer Support System version v1 Description A directory listing issue allows attackers to list directories and sensitive files within the application without requiring authorization. Recommendations For Customer Support System version v1,...

PT-2023-31435

Name of the Vulnerable Software and Affected Versions Customer Support System version v1 Description A cross-site scripting XSS issue allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the address parameter at "/customer support/index.php?page=new...

PT-2023-31437 · Unknown · Customer Support System

Name of the Vulnerable Software and Affected Versions: Customer Support System version v1 Description: A directory listing issue allows attackers to list directories and sensitive files within the application without requiring authorization. Recommendations: For Customer Support System version v1...

PT-2023-31253

Name of the Vulnerable Software and Affected Versions Customer Support System version v1 Description A local file inclusion issue allows attackers to include internal PHP files and gain unauthorized access by manipulating the page parameter at the "/customer support/index.php" API endpoint...

PT-2023-31256

Name of the Vulnerable Software and Affected Versions Customer Support System version v1 Description The issue is related to a SQL injection vulnerability. This vulnerability can be exploited via the username parameter at the "/customer support/ajax.php?action=login" API endpoint. Recommendations...

PT-2023-31255

Name of the Vulnerable Software and Affected Versions Customer Support System version v1 Description The issue is related to a SQL injection vulnerability. This vulnerability can be exploited via the email parameter at the "/customer support/ajax.php" API endpoint. Recommendations For Customer...

PT-2023-31427

Name of the Vulnerable Software and Affected Versions Customer Support System version v1 Description The issue is related to a SQL injection vulnerability. This vulnerability can be exploited via the id parameter at the "/customer support/manage department.php" API endpoint. Recommendations For...