Customer Support System 1.0 - 'description' Stored XSS in The Admin Panel

Exploit Title: Customer Support System 1.0 - 'description' Stored XSS in The Admin Panel Date: 2020-11-11 Exploit Author: Ahmed Abbas Vendor Homepage: https://www.sourcecodester.com/php/14587/customer-support-system-using-phpmysqli-source-code.html Software Link:...

Customer Support System 1.0 - 'username' Authentication Bypass

Title: Customer Support System 1.0 - 'username' Authentication Bypass Date: 2020-11-11 Exploit Author: Ahmed Abbas Vendor Homepage: https://www.sourcecodester.com/php/14587/customer-support-system-using-phpmysqli-source-code.html Software Link:...

Customer Support System 1.0 Cross Site Scripting

Exploit Title: Customer Support System 1.0 - Stored XSS in The Admin Panel Date: 2020-11-11 Exploit Author: Ahmed Abbas Vendor Homepage: https://www.sourcecodester.com/php/14587/customer-support-system-using-phpmysqli-source-code.html Software Link:...

Customer Support System 1.0 SQL Injection

Title: Customer Support System 1.0 - Authentication Bypass Date: 2020-11-11 Exploit Author: Ahmed Abbas Vendor Homepage: https://www.sourcecodester.com/php/14587/customer-support-system-using-phpmysqli-source-code.html Software Link:...

Acronis: Ticket Trick at https://account.acronis.com

Summary Hello dear team, I found a serious issue in Acronis This vulnerability is called ticket trick vulnerability which comes under critical category. Which can allow me to login on websites like atlassian,github,clouflare,choopa,..etc on behalf of [email protected] . Steps To Reprodu...

CVE-2020-24963

An Authenticated Persistent XSS vulnerability was discovered in the Best Support System, tested version v3.0.4...

CVE-2020-24963

An Authenticated Persistent XSS vulnerability was discovered in the Best Support System, tested version v3.0.4...

Cross site scripting

An Authenticated Persistent XSS vulnerability was discovered in the Best Support System, tested version v3.0.4...

CVE-2020-24963

An Authenticated Persistent XSS vulnerability was discovered in the Best Support System, tested version v3.0.4...

CVE-2020-24963

Summary: CVE-2020-24963 affects the Best Support System, v3.0.4. The vulnerability is an authenticated persistent XSS in the application, demonstrated via the ticketing workflow, specifically the ticket_body input in the ticket-confirm/ticket-reply/11.html path. The evidence from connected source...

CVE-2020-23983

Michael-design iChat Realtime PHP Live Support System 1.6 has persistent Cross-site Scripting via chat,text-filed tags...

CVE-2020-23983

Michael-design iChat Realtime PHP Live Support System 1.6 has persistent Cross-site Scripting via chat,text-filed tags...

CVE-2020-23983

CVE-2020-23983 affects Michael-design iChat Realtime PHP Live Support System 1.6. The vulnerability is a persistent Cross-site Scripting (XSS) flaw triggered via chat and text-field tags, attributed to an input handling issue in the affected component. The provided sources describe the issue but ...

Support Incident Tracker SQL Injection Vulnerability (CNVD-2021-25275)

Support Incident Tracker SiT! is a PHP and MySQL based technical support phone/email tracking system. A SQL injection vulnerability exists in Support Incident Tracker version 3.67 p2. The vulnerability stems from a lack of validation of externally entered SQL statements in database-based...

iChat 1.6 Cross Site Scripting

Exploit Title: iChat 1.6 XSS Vunlerability Google Dork:N/A Date: 2020-05-06 Exploit Author: @ThelastVvV Vendor Homepage: https://codecanyon.net/item/ichat-realtime-php-live-support-system/20758162?srank=2 Version: 1.6 Tested on: 5.4.0-kali4-amd64...

WP Support Plus Responsive Ticket System < 9.1.2 - Stored XSS

The WP Support Plus Responsive Ticket System WordPress plugin was affected by a Stored XSS security vulnerability...

LiveZilla 3.1.8.3 - XSS Vulnerability

No description provided by source. Info: LiveZilla, the Next Generation Live Help / Live Chat and Live Support System connects you to your website visitors. Use LiveZilla to provide Live Chats and monitor your website visitors in real-time. Convert visitors to customers - with LiveZilla! Credits:...

am4ss Support System 1.2 PHP Code Injection Exploit

No description provided by source. ? / + Title : Am4ss = 1.2 , PHP Code Injection | Download : am4ss.com | Tested on: Windows xp sp3 , CentOs | Author : Faris , aka i-Hmx | [email protected] + sec4ever.com , 1337s.cc Time line : 10/2011 , Vulnerability discovered till now , i haven't reported the...

php live helper <= 2.0.1 - Multiple Vulnerabilities

No description provided by source. GulfTech Security Research August 16, 2008 Vendor : Turnkey Web Tools, Inc URL : http://www.turnkeywebtools.com Version : PHP Live Helper = 2.0.1 Risk : Multiple Vulnerabilities Description: PHP Live Helper is an online support system written in php that allows...

LiveZilla 5.1.1.0 Cross Site Scripting

Author: Jakub Zoczek [email protected] CVE Reference: CVE-2013-7003 Product: LiveZilla Vendor: LiveZilla GmbH http://livezilla.net Affected version: 5.1.1.0 Severity: Medium CVSSv2 Score: 4.3 AV:N/AC:M/Au:N/C:N/I:P/A:N Status: Fixed 0x01 Background LiveZilla, the widely-used and trusted Live Help...