Lucene search
+L

322 matches found

CNVD
CNVD
•added 2024/03/08 12:00 a.m.•33 views

Customer Support System SQL Injection Vulnerability

Customer Support System is a customer support system by oretnom23 Personal Developer that helps a particular business or company to provide customer support after a customer has purchased a product from them. Customer Support System suffers from a SQL injection vulnerability that originates from...

9.8CVSS7.9AI score0.0114EPSS
SaveExploits2References1
CNVD
CNVD
•added 2024/03/08 12:00 a.m.•44 views

Customer Support System SQL Injection Vulnerability (CNVD-2024-14030)

Customer Support System is a customer support system by oretnom23 Personal Developer that helps a particular business or company to provide customer support after a customer has purchased a product from them. Customer Support System suffers from a SQL injection vulnerability that originates from...

9.8CVSS8.1AI score0.00818EPSS
SaveExploits2References1
OSV
OSV
•added 2024/03/07 1:15 a.m.•13 views

CVE-2023-51281

Cross Site Scripting vulnerability in Customer Support System v.1.0 allows a remote attacker to escalate privileges via a crafted script firstname, "lastname", "middlename", "contact" and address parameters...

5.4CVSS5.8AI score0.00478EPSS
SaveExploits2References2
NVD
NVD
•added 2024/03/07 1:15 a.m.•19 views

CVE-2023-51281

Cross Site Scripting vulnerability in Customer Support System v.1.0 allows a remote attacker to escalate privileges via a crafted script firstname, "lastname", "middlename", "contact" and address parameters...

5.4CVSS6.4AI score0.00478EPSS
SaveExploits2References2
attackerkb
attackerkb
•added 2024/03/07 1:15 a.m.•7 views

CVE-2023-51281

Cross Site Scripting vulnerability in Customer Support System v.1.0 allows a remote attacker to escalate privileges via a crafted script firstname, "lastname", "middlename", "contact" and address parameters...

5.4CVSS5.8AI score0.00478EPSS
SaveExploits2References3
Prion
Prion
•added 2024/03/07 1:15 a.m.•27 views

Cross site scripting

Cross Site Scripting vulnerability in Customer Support System v.1.0 allows a remote attacker to escalate privileges via a crafted script firstname, "lastname", "middlename", "contact" and address parameters...

7AI score0.00478EPSS
SaveExploits2References2
CVE
CVE
•added 2024/03/07 12:00 a.m.•70 views

CVE-2023-51281

The Customer Support System v.1.0 is vulnerable to a Cross-Site Scripting (XSS) vulnerability. Authenticated attackers can execute arbitrary web scripts or HTML by injecting a manipulated payload into the firstname , lastname , middlename , contact , or address parameters via the /customer_suppor...

5.4CVSS6.6AI score0.00478EPSS
SaveExploits2References2Affected Software1
CNNVD
CNNVD
•added 2024/03/07 12:00 a.m.•15 views

Customer Support System Security Breach

Customer Support System is a customer support system by oretnom23 Individual Developer that helps a particular business or company to provide customer support after a customer has purchased a product from them. A security vulnerability exists in Customer Support System version v.1.0. An attacker...

5.4CVSS7AI score0.00478EPSS
SaveExploits2References3
Vulnrichment
Vulnrichment
•added 2024/03/07 12:00 a.m.•13 views

CVE-2023-51281

Cross Site Scripting vulnerability in Customer Support System v.1.0 allows a remote attacker to escalate privileges via a crafted script firstname, "lastname", "middlename", "contact" and address parameters...

6.7AI score0.00478EPSS
SaveExploits2References2
Cvelist
Cvelist
•added 2024/03/07 12:00 a.m.•31 views

CVE-2023-51281

Cross Site Scripting vulnerability in Customer Support System v.1.0 allows a remote attacker to escalate privileges via a crafted script firstname, "lastname", "middlename", "contact" and address parameters...

6.6AI score0.00478EPSS
SaveExploits2References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/03/07 12:00 a.m.•4 views

CVE-2023-51281: Improper Neutralization of Input During Web Page Generation

Cross Site Scripting vulnerability in Customer Support System v.1.0 allows a remote attacker to escalate privileges via a crafted script firstname, "lastname", "middlename", "contact" and address parameters...

5.4CVSS5.9AI score0.00478EPSS
SaveExploits2References2
OSV
OSV
•added 2024/03/06 1:15 a.m.•14 views

CVE-2023-49974

A cross-site scripting XSS vulnerability in Customer Support System v1 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the contact parameter at /customersupport/index.php?page=customerlist...

6.1CVSS5.9AI score0.0045EPSS
SaveExploits2References2
attackerkb
attackerkb
•added 2024/03/06 1:15 a.m.•8 views

CVE-2023-49974

A cross-site scripting XSS vulnerability in Customer Support System v1 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the contact parameter at /customersupport/index.php?page=customerlist...

6.1CVSS6AI score0.0045EPSS
SaveExploits2References3
attackerkb
attackerkb
•added 2024/03/06 1:15 a.m.•27 views

CVE-2023-49973

A cross-site scripting XSS vulnerability in Customer Support System v1 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the email parameter at /customersupport/index.php?page=customerlist...

6.1CVSS6AI score0.0045EPSS
SaveExploits1References3
OSV
OSV
•added 2024/03/06 1:15 a.m.•14 views

CVE-2023-49977

A cross-site scripting XSS vulnerability in Customer Support System v1 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the address parameter at /customersupport/index.php?page=newcustomer...

5.4CVSS5.9AI score0.0045EPSS
SaveExploits2References2
NVD
NVD
•added 2024/03/06 1:15 a.m.•30 views

CVE-2023-49977

A cross-site scripting XSS vulnerability in Customer Support System v1 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the address parameter at /customersupport/index.php?page=newcustomer...

5.4CVSS5.6AI score0.0045EPSS
SaveExploits2References2
OSV
OSV
•added 2024/03/06 1:15 a.m.•15 views

CVE-2023-49971

A cross-site scripting XSS vulnerability in Customer Support System v1 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the firstname parameter at /customersupport/index.php?page=customerlist...

6.1CVSS5.9AI score0.00433EPSS
SaveExploits1References2
OSV
OSV
•added 2024/03/06 1:15 a.m.•15 views

CVE-2023-49976

A cross-site scripting XSS vulnerability in Customer Support System v1 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the subject parameter at /customersupport/index.php?page=newticket...

5.4CVSS5.9AI score0.00466EPSS
SaveExploits5References2
NVD
NVD
•added 2024/03/06 1:15 a.m.•23 views

CVE-2023-49974

A cross-site scripting XSS vulnerability in Customer Support System v1 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the contact parameter at /customersupport/index.php?page=customerlist...

6.1CVSS5.6AI score0.0045EPSS
SaveExploits2References2
NVD
NVD
•added 2024/03/06 1:15 a.m.•49 views

CVE-2023-49976

A cross-site scripting XSS vulnerability in Customer Support System v1 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the subject parameter at /customersupport/index.php?page=newticket...

5.4CVSS5.6AI score0.00466EPSS
SaveExploits5References2
Rows per page
Query Builder