CVE-2023-49548

Customer Support System v1 was discovered to contain a SQL injection vulnerability via the lastname parameter at /customersupport/ajax.php?action=saveuser...

CVE-2023-49548

The Customer Support System version 1.0 contains a SQL injection vulnerability in the lastname parameter at the /customer_support/ajax.php?action=save_user endpoint. The root cause is a lack of validation of externally entered SQL statements, allowing an attacker to execute illegal commands again...