4 matches found
CVE-2023-49546
Customer Support System v1 was discovered to contain a SQL injection vulnerability via the email parameter at /customersupport/ajax.php...
8.8CVSS5.8AI score0.00755EPSS
SaveExploits1References2
CVE-2023-49546
Customer Support System v1 is vulnerable to a SQL injection vulnerability due to a lack of validation for externally entered SQL statements in the email parameter at the /customer_support/ajax.php page. A malicious attacker can exploit this flaw during the save_staff operation (creating or editin...
5.8AI score0.00755EPSS
SaveExploits1References2Affected Software1
20