Customer Support System vulnerabilities

2 known vulnerabilities in Customer Support System from Oretnom23. 2 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 9.4 Critical severity

  Customer Support System: Missing Authentication for Critical Functionality

  CVE-2025-70141Feb 18, 2026Oretnom23

  SourceCodester Customer Support System 1.0 contains an incorrect access control vulnerability in ajax.php. The AJAX dispatcher does not enforce authentication or authorization before invoking administrative methods in admin_class.php based on the action parame

• 8.8 High severity

  Customer Support System: Improper Neutralization of Special Elements used in an SQL Command

  CVE-2023-50070Dec 29, 2023Oretnom23

  Sourcecodester Customer Support System 1.0 has multiple SQL injection vulnerabilities in /customer_support/ajax.php?action=save_ticket via department_id, customer_id, and subject.