CVE-2023-49547

Customer Support System v1 was discovered to contain a SQL injection vulnerability via the username parameter at /customer_support/ajax.php?action=login.

Affected products

Customer Support System

oretnom23 Customer Support System

= 1.0

Fix

Available

CVSS 3.1

9.8 CRITICAL

EPSS

1.1% (64th percentile)

Weakness

CWE-89

NVD status

Analyzed

Published

2024-03-04