CVE-2023-49547

Customer Support System v1 was discovered to contain a SQL injection vulnerability via the username parameter at /customersupport/ajax.php?action=login...

CVE-2023-49547

The Customer Support System v1 is vulnerable to a SQL injection vulnerability due to a lack of validation on the username parameter at the /customer_support/ajax.php?action=login endpoint. This flaw allows unauthenticated remote attackers to bypass authentication by injecting malicious SQL statem...