CVE-2023-50070
HIGH WAF: High
CVSS 8.8
Published: 2023-12-29
CWE-89
Sourcecodester Customer Support System 1.0 has multiple SQL injection vulnerabilities in /customer_support/ajax.php?action=save_ticket via department_id, customer_id, and subject.
WAF Coverage Analysis
SQL Injection
High WAF Coverage
OWASP: A03:2021 Injection
942xxx - SQL Injection
Affected Software
| Vendor | Product | Version |
|---|---|---|
| oretnom23 | customer_support_system | 1.0 |
References
- github.com (Exploit, Third Party Advisory)
- medium.com (Exploit, Third Party Advisory)