geraldoalcantara/CVE-2023-49970

geraldoalcantara/CVE-2023-49970

GitHubGitHub
GitHubgithub.com
Releases0
Customer Support System 1.0 - SQL Injection Vulnerability in the "subject" Parameter During "save_ticket" Operation
Log in to subscribe

CVE History

CVEPublishedCVSS v3CVSS v2
CVE-2023-49970↗
9.8 CRITICAL—

Customer Support System v1 was discovered to contain a SQL injection vulnerability via the subject parameter at /customer_support/ajax.php?action=save_ticket.