CVE-2023-49970

Customer Support System v1 was discovered to contain a SQL injection vulnerability via the subject parameter at /customersupport/ajax.php?action=saveticket...

CVE-2023-49970

Customer Support System v1 is vulnerable to a SQL injection vulnerability due to a lack of validation on the subject parameter at the /customer_support/ajax.php?action=save_ticket endpoint. An attacker can execute arbitrary SQL commands against the MySQL database, potentially leading to the theft...