geraldoalcantara/CVE-2023-50070

geraldoalcantara/CVE-2023-50070

GitHubGitHub
GitHubgithub.com
Releases0
Stars2
Multiple SQL injection vulnerabilities in /customer_support/ajax.php?action=save_ticket in Customer Support System 1.0 allow authenticated attackers to execute arbitrary SQL commands via department_id, customer_id and subject.
Log in to subscribe

CVE History

CVEPublishedCVSS v3CVSS v2
CVE-2023-50070↗
8.8 HIGH—

Sourcecodester Customer Support System 1.0 has multiple SQL injection vulnerabilities in /customer_support/ajax.php?action=save_ticket via department_id, customer_id, and subject.