CS
Product
Customer Support System
14
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 2High 6Medium 6Low 0
Watch
Add Customer Support System to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2023-49978 | 8.8 | Mar 6 | Incorrect access control in Customer Support System v1 allows non-administrator users to access administrative pages and execute actions reserved for administrators Affected: 1.0 |
| CVE-2023-49546 | 8.8 | Mar 4 | Customer Support System v1 was discovered to contain a SQL injection vulnerability via the email parameter at /customer_support/ajax.php Affected: 1.0 |
| CVE-2023-49548 | 8.8 | Mar 4 | Customer Support System v1 was discovered to contain a SQL injection vulnerability via the lastname parameter at /customer_support/ajax.php?action=save_user Affected: 1.0 |
| CVE-2023-49979 | 7.5 | Mar 6 | A directory listing vulnerability in Customer Support System v1 allows attackers to list directories and sensitive files within the application without requiring authorization Affected: 1.0 |
| CVE-2023-49545 | 7.5 | Mar 1 | A directory listing vulnerability in Customer Support System v1 allows attackers to list directories and sensitive files within the application without requiring authorization Affected: 1.0 |
| CVE-2023-49968 | 7.3 | Mar 4 | Customer Support System v1 was discovered to contain a SQL injection vulnerability via the id parameter at /customer_support/manage_department.php Affected: 1.0 |
Showing 6