CVE-2023-49970

Customer Support System v1 was discovered to contain a SQL injection vulnerability via the subject parameter at /customer_support/ajax.php?action=save_ticket.

Affected products

Customer Support System

oretnom23 Customer Support System

= 1.0

Fix

Available

CVSS 3.1

9.8 CRITICAL

EPSS

0.8% (55th percentile)

Weakness

CWE-89

NVD status

Analyzed

Published

2024-03-04