CVE-2023-49544

Published March 1st, 2024

View on NVD ↗

CVSS v3

4.9

MEDIUM

CVSS v2

N/A

Affected

PROJECT

Description

A local file inclusion (LFI) in Customer Support System v1 allows attackers to include internal PHP files and gain unauthorized acces via manipulation of the page= parameter at /customer_support/index.php.

geraldoalcantara/CVE-2023-49544

Customer Support System 1.0 - Local File Inclusion

GitHub