6 matches found
CVE-2023-50070
CVE-2023-50070 Customer Support System 1.0 - 다중 SQL 인젝션 취약점 - saveticket 설명 : Customer Support System 1.0의 /customersupport/ajax.php?action=saveticket에 존재하는 다중 SQL 인젝션 취약점으로 인해 인증된 공격자가 departmentid, customerid 및 subject를 통해 임의의 SQL 명령을 실행할 수 있습니다. 취약한 제품 버전 : Customer Support System 1.0 CVE 작성자 ...
CVE-2023-49970
CVE-2023-49970 Customer Support System 1.0 – Vulnérabilité d'injection SQL dans le paramètre "subject" lors de l'opération "saveticket" Description : Une vulnérabilité d'injection SQL existe dans la version 1 du Customer Support System. Un attaquant malveillant peut exécuter des commandes SQL sur...
CVE-2023-49970
Customer Support System v1 was discovered to contain a SQL injection vulnerability via the subject parameter at /customersupport/ajax.php?action=saveticket...
CVE-2023-50070
Sourcecodester Customer Support System 1.0 has multiple SQL injection vulnerabilities in /customersupport/ajax.php?action=saveticket via departmentid, customerid, and subject...
Sql injection
Sourcecodester Customer Support System 1.0 has multiple SQL injection vulnerabilities in /customersupport/ajax.php?action=saveticket via departmentid, customerid, and subject...