Vulmon Recent Vulnerabilities Research Posts Trends Blog About Contact
8.8
CVSSv3

CVE-2023-50070

Published: 29/12/2023 Updated: 05/01/2024
CVSS v3 Base Score: 8.8 | Impact Score: 5.9 | Exploitability Score: 2.8
VMScore: 0

Vulnerability Summary

Sourcecodester Customer Support System 1.0 has multiple SQL injection vulnerabilities in /customer_support/ajax.php?action=save_ticket via department_id, customer_id, and subject.

Vulnerable Product Search on Vulmon Subscribe to Product

oretnom23 customer support system 1.0

Github Repositories

https://github.com/geraldoalcantara/CVE-2023-50070

Multiple SQL injection vulnerabilities in /customer_support/ajax.php?action=save_ticket in Customer Support System 1.0 allow authenticated attackers to execute arbitrary SQL commands via department_id, customer_id and subject.

CVE-2023-50070 Customer Support System 10 - Multiple SQL injection vulnerabilities - save_ticket Description: Multiple SQL injection vulnerabilities in /customer_support/ajaxphp?action=save_ticket in Customer Support System 10 allow authenticated attackers to execute arbitrary SQL commands via department_id, customer_id and subject Vulnerable Product Version:&n

References

CWE-89https://github.com/geraldoalcantara/CVE-2023-50070https://medium.com/%40geraldoalcantarapro/cve-2023-50070-1f58c2a64b1chttps://nvd.nist.govhttps://github.com/geraldoalcantara/CVE-2023-50070
CVSSv3
CVSSv2
CVSSv3
VMScore
Recommendations:
CVE-2024-33572CVE-2024-24919CVE-2024-0230CVE-2024-32714HTML injectionlocal file inclusionCVE-2024-31098CVE-2024-31244privilege
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started

Vulmon Search

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

About

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Products

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Connect

Twitter Reddit Linkedin Facebook