Login Request a demo
CS
Product
Customer Support System
by Sourcecodester · last CVE Mar 7, 2024
14
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Vulnerabilities14In the news0Timeline
Severity mix
Critical 2High 6Medium 6Low 0
Severity
All severities14Critical2High6Medium6Low0
Exploitation
On CISA KEV0Exploited in the wild0
Watch

Add Customer Support System to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2023-49970
9.8
1%
Mar 4
Customer Support System v1 was discovered to contain a SQL injection vulnerability via the subject parameter at /customer_support/ajax.php?action=save_ticket
Affected: 1.0
CVE-2023-49547
9.8
1%
Mar 4
Customer Support System v1 was discovered to contain a SQL injection vulnerability via the username parameter at /customer_support/ajax.php?action=login
Affected: 1.0
CVE-2023-49978
8.8
1%
Mar 6
Incorrect access control in Customer Support System v1 allows non-administrator users to access administrative pages and execute actions reserved for administrators
Affected: 1.0
CVE-2023-49546
8.8
1%
Mar 4
Customer Support System v1 was discovered to contain a SQL injection vulnerability via the email parameter at /customer_support/ajax.php
Affected: 1.0
CVE-2023-49548
8.8
1%
Mar 4
Customer Support System v1 was discovered to contain a SQL injection vulnerability via the lastname parameter at /customer_support/ajax.php?action=save_user
Affected: 1.0
CVE-2023-49979
7.5
1%
Mar 6
A directory listing vulnerability in Customer Support System v1 allows attackers to list directories and sensitive files within the application without requiring authorization
Affected: 1.0
CVE-2023-49545
7.5
1%
Mar 1
A directory listing vulnerability in Customer Support System v1 allows attackers to list directories and sensitive files within the application without requiring authorization
Affected: 1.0
CVE-2023-49968
7.3
0%
Mar 4
Customer Support System v1 was discovered to contain a SQL injection vulnerability via the id parameter at /customer_support/manage_department.php
Affected: 1.0
CVE-2023-49971
6.1
0%
Mar 6
A cross-site scripting (XSS) vulnerability in Customer Support System v1 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the…
Affected: 1.0
CVE-2023-49974
6.1
0%
Mar 6
A cross-site scripting (XSS) vulnerability in Customer Support System v1 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the contact…
Affected: 1.0
CVE-2023-51281
5.4
0%
Mar 7
Cross Site Scripting vulnerability in Customer Support System v.1.0 allows a remote attacker to escalate privileges via a crafted script firstname, "lastname", "middlename",…
Affected: 1.0
CVE-2023-49977
5.4
0%
Mar 6
A cross-site scripting (XSS) vulnerability in Customer Support System v1 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the address…
Affected: 1.0
CVE-2023-49544
4.9
1%
Mar 1
A local file inclusion (LFI) in Customer Support System v1 allows attackers to include internal PHP files and gain unauthorized acces via manipulation of the page= parameter at…
Affected: 1.0
CVE-2023-49969
4.3
1%
Mar 4
Customer Support System v1 was discovered to contain a SQL injection vulnerability via the id parameter at /customer_support/index.php?page=edit_customer
Affected: 1.0
Showing 14