CVE-2023-49968

The Customer Support System v1 (by oretnom23 Personal Developer) contains a SQL injection vulnerability in the id parameter of the /customer_support/manage_department.php page. The root cause is a lack of validation for externally entered SQL statements, which allows an attacker to execute illega...