CVE-2023-49969

Customer Support System v1 was discovered to contain a SQL injection vulnerability via the id parameter at /customersupport/index.php?page=editcustomer...

CVE-2023-49969

Customer Support System v1 was discovered to contain a SQL injection vulnerability via the id parameter at /customersupport/index.php?page=editcustomer...

CVE-2023-49969

The Customer Support System v1 is susceptible to a SQL injection vulnerability due to a lack of validation on the id parameter at the /customer_support/index.php?page=edit_customer endpoint. An attacker can manipulate this URL parameter to execute unauthorized SQL commands against the MySQL datab...