Lucene search
+L

322 matches found

NVD
NVD
•added 2024/03/06 1:15 a.m.•49 views

CVE-2023-49976

A cross-site scripting XSS vulnerability in Customer Support System v1 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the subject parameter at /customersupport/index.php?page=newticket...

5.4CVSS5.6AI score0.00466EPSS
SaveExploits5References2
attackerkb
attackerkb
•added 2024/03/06 1:15 a.m.•10 views

CVE-2023-49971

A cross-site scripting XSS vulnerability in Customer Support System v1 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the firstname parameter at /customersupport/index.php?page=customerlist...

6.1CVSS6AI score0.00433EPSS
SaveExploits1References3
attackerkb
attackerkb
•added 2024/03/06 1:15 a.m.•15 views

CVE-2023-49976

A cross-site scripting XSS vulnerability in Customer Support System v1 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the subject parameter at /customersupport/index.php?page=newticket...

5.4CVSS6.2AI score0.00466EPSS
SaveExploits5References3
attackerkb
attackerkb
•added 2024/03/06 1:15 a.m.•10 views

CVE-2023-49977

A cross-site scripting XSS vulnerability in Customer Support System v1 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the address parameter at /customersupport/index.php?page=newcustomer...

5.4CVSS6AI score0.0045EPSS
SaveExploits2References3
OSV
OSV
•added 2024/03/06 1:15 a.m.•17 views

CVE-2023-49973

A cross-site scripting XSS vulnerability in Customer Support System v1 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the email parameter at /customersupport/index.php?page=customerlist...

6.1CVSS5.9AI score0.0045EPSS
SaveExploits1References2
NVD
NVD
•added 2024/03/06 1:15 a.m.•19 views

CVE-2023-49973

A cross-site scripting XSS vulnerability in Customer Support System v1 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the email parameter at /customersupport/index.php?page=customerlist...

6.1CVSS5.6AI score0.0045EPSS
SaveExploits1References2
Prion
Prion
•added 2024/03/06 1:15 a.m.•28 views

Cross site scripting

A cross-site scripting XSS vulnerability in Customer Support System v1 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the address parameter at /customersupport/index.php?page=newcustomer...

5.9AI score0.0045EPSS
SaveExploits2References2
Prion
Prion
•added 2024/03/06 1:15 a.m.•22 views

Cross site scripting

A cross-site scripting XSS vulnerability in Customer Support System v1 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the subject parameter at /customersupport/index.php?page=newticket...

5.9AI score0.00466EPSS
SaveExploits5References2
Prion
Prion
•added 2024/03/06 1:15 a.m.•35 views

Cross site scripting

A cross-site scripting XSS vulnerability in Customer Support System v1 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the email parameter at /customersupport/index.php?page=customerlist...

5.9AI score0.0045EPSS
SaveExploits1References2
Prion
Prion
•added 2024/03/06 1:15 a.m.•24 views

Cross site scripting

A cross-site scripting XSS vulnerability in Customer Support System v1 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the contact parameter at /customersupport/index.php?page=customerlist...

5.9AI score0.0045EPSS
SaveExploits2References2
Prion
Prion
•added 2024/03/06 1:15 a.m.•24 views

Cross site scripting

A cross-site scripting XSS vulnerability in Customer Support System v1 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the firstname parameter at /customersupport/index.php?page=customerlist...

5.9AI score0.00433EPSS
SaveExploits1References2
Vulnrichment
Vulnrichment
•added 2024/03/06 12:00 a.m.•17 views

CVE-2023-49974

A cross-site scripting XSS vulnerability in Customer Support System v1 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the contact parameter at /customersupport/index.php?page=customerlist...

5.7AI score0.0045EPSS
SaveExploits2References2
CVE
CVE
•added 2024/03/06 12:00 a.m.•70 views

CVE-2023-49979

CVE-2023-49979 concerns a directory listing vulnerability in the Customer Support System v1, allowing unauthenticated attackers to enumerate directories and sensitive files. The issue affects the web application’s handling of directory access (no auth required) and is described consistently acros...

7.5CVSS6.6AI score0.00745EPSS
SaveExploits1References2Affected Software1
Cvelist
Cvelist
•added 2024/03/06 12:00 a.m.•36 views

CVE-2023-49977

A cross-site scripting XSS vulnerability in Customer Support System v1 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the address parameter at /customersupport/index.php?page=newcustomer...

5.7AI score0.0045EPSS
SaveExploits2References2
zdt
zdt
•added 2024/03/06 12:00 a.m.•386 views

Customer Support System 1.0 - Multiple SQL injection Vulnerability

Exploit Title: Customer Support System 1.0 - Multiple SQL injection vulnerabilities Exploit Author: Geraldo Alcantara Vendor Homepage: https://www.sourcecodester.com/php/14587/customer-support-system-using-phpmysqli-source-code.html Software Link:...

8.8CVSS8.9AI score0.13754EPSS
SaveExploits6
CNNVD
CNNVD
•added 2024/03/06 12:00 a.m.•14 views

Customer Support System 跨站脚本漏洞

Customer Support System is a customer support system by oretnom23 Personal Developer that helps a particular business or company to provide customer support after a customer has purchased a product from them. Customer Support System suffers from a cross-site scripting vulnerability that stems fro...

6.1CVSS6.2AI score0.00433EPSS
SaveExploits1References3
Vulnrichment
Vulnrichment
•added 2024/03/06 12:00 a.m.•18 views

CVE-2023-49977

A cross-site scripting XSS vulnerability in Customer Support System v1 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the address parameter at /customersupport/index.php?page=newcustomer...

5.7AI score0.0045EPSS
SaveExploits2References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/03/06 12:00 a.m.•2 views

CVE-2023-49971: Improper Neutralization of Input During Web Page Generation

A cross-site scripting XSS vulnerability in Customer Support System v1 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the firstname parameter at /customersupport/index.php?page=customerlist...

6.1CVSS6.1AI score0.00433EPSS
SaveExploits1References3
CVE
CVE
•added 2024/03/06 12:00 a.m.•73 views

CVE-2023-49971

CVE-2023-49971 describes a cross-site scripting (XSS) vulnerability in the Customer Support System v1, exploitable via a crafted payload injected into the firstname parameter at /customer_support/index.php?page=customer_list. Multiple connected sources (NVD, Red Hat, CNVD, CVE List, CNVD CNVD, PR...

6.1CVSS6.1AI score0.00433EPSS
SaveExploits1References2Affected Software1
Vulnrichment
Vulnrichment
•added 2024/03/06 12:00 a.m.•14 views

CVE-2023-49973

A cross-site scripting XSS vulnerability in Customer Support System v1 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the email parameter at /customersupport/index.php?page=customerlist...

5.7AI score0.0045EPSS
SaveExploits1References2
Rows per page
Query Builder