CVE-2023-49968

The Customer Support System v1 is vulnerable to a SQL injection vulnerability in the /customer_support/manage_department.php page. The root cause is a lack of validation for the id parameter, which allows an attacker to execute arbitrary SQL commands on the MySQL database. This can be exploited t...