CVE-2023-49547

Customer Support System v1 was discovered to contain a SQL injection vulnerability via the username parameter at /customer_support/ajax.php?action=login.

Score

CVSS 3.1 9.8 Critical

Status

Analyzed - cve@mitre.org

Published

2024-03-05

Last modified

2024-08-29

Weaknesses

CWE-89

Affected products

• Customer Support System (Oretnom23)
• Customer Support System (Sourcecodester)

References

• https://github.com/geraldoalcantara/CVE-2023-49547
• https://www.sourcecodester.com/php/14587/customer-support-system-using-phpmysqli-source-code.html