CS
Product
Customer Support System
19
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 3High 7Medium 9Low 0
Watch
Add Customer Support System to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2023-49970 | 9.8 | Mar 5 | Customer Support System v1 was discovered to contain a SQL injection vulnerability via the subject parameter at /customer_support/ajax.php?action=save_ticket Affected: 1.0 |
| CVE-2023-49547 | 9.8 | Mar 5 | Customer Support System v1 was discovered to contain a SQL injection vulnerability via the username parameter at /customer_support/ajax.php?action=login Affected: 1.0 |
| CVE-2025-70141 | 9.4 | Feb 18 | SourceCodester Customer Support System 1.0 contains an incorrect access control vulnerability in ajax.php Affected: 1.0 |
| CVE-2025-40728 | 8.8 | Jun 16 | SQL injection vulnerability in Customer Support System v1.0 Affected: 1.0 |
| CVE-2023-49978 | 8.8 | Mar 21 | Incorrect access control in Customer Support System v1 allows non-administrator users to access administrative pages and execute actions reserved for administrators Affected: 1.0 |
| CVE-2023-49548 | 8.8 | Mar 5 | Customer Support System v1 was discovered to contain a SQL injection vulnerability via the lastname parameter at /customer_support/ajax.php?action=save_user Affected: 1.0 |
| CVE-2023-49546 | 8.8 | Mar 5 | Customer Support System v1 was discovered to contain a SQL injection vulnerability via the email parameter at /customer_support/ajax.php Affected: 1.0 |
| CVE-2023-50070 | 8.8 | Dec 29 | Sourcecodester Customer Support System 1.0 has multiple SQL injection vulnerabilities in /customer_support/ajax.php?action=save_ticket via department_id, customer_id, and subject Affected: 1.0 |
| CVE-2023-49545 | 7.5 | Mar 1 | A directory listing vulnerability in Customer Support System v1 allows attackers to list directories and sensitive files within the application without requiring authorization Affected: 1.0 |
| CVE-2023-49968 | 7.3 | Mar 5 | Customer Support System v1 was discovered to contain a SQL injection vulnerability via the id parameter at /customer_support/manage_department.php Affected: 1.0 |
| CVE-2025-40729 | 6.1 | Jun 16 | Reflected Cross-Site Scripting (XSS) in /customer_support/index.php in Customer Support System v1.0, which allows remote attackers to execute arbitrary code via the page parameter Affected: 1.0 |
| CVE-2023-49974 | 6.1 | Mar 6 | A cross-site scripting (XSS) vulnerability in Customer Support System v1 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the contact… Affected: 1.0 |
| CVE-2023-49973 | 6.1 | Mar 6 | A cross-site scripting (XSS) vulnerability in Customer Support System v1 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the email… Affected: 1.0 |
| CVE-2023-49971 | 6.1 | Mar 6 | A cross-site scripting (XSS) vulnerability in Customer Support System v1 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the… Affected: 1.0 |
| CVE-2023-51281 | 5.4 | Mar 7 | Cross Site Scripting vulnerability in Customer Support System v.1.0 allows a remote attacker to escalate privileges via a crafted script firstname, "lastname", "middlename",… Affected: 1.0 |
| CVE-2023-49977 | 5.4 | Mar 6 | A cross-site scripting (XSS) vulnerability in Customer Support System v1 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the address… Affected: 1.0 |
| CVE-2023-49976 | 5.4 | Mar 6 | A cross-site scripting (XSS) vulnerability in Customer Support System v1 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the subject… Affected: 1.0 |
| CVE-2023-49544 | 4.9 | Mar 1 | A local file inclusion (LFI) in Customer Support System v1 allows attackers to include internal PHP files and gain unauthorized acces via manipulation of the page= parameter at… Affected: 1.0 |
| CVE-2023-49969 | 4.3 | Mar 5 | Customer Support System v1 was discovered to contain a SQL injection vulnerability via the id parameter at /customer_support/index.php?page=edit_customer Affected: 1.0 |
Showing 19