customer_support_system vulnerabilities
6 known vulnerabilities in customer_support_system from SourceCodester. 6 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.
Latest first
- 7.5 High severity
customer_support_system: Missing Authorization
A directory listing vulnerability in Customer Support System v1 allows attackers to list directories and sensitive files within the application without requiring authorization.
- 8.8 High severity
customer_support_system: Improper Access Control
Incorrect access control in Customer Support System v1 allows non-administrator users to access administrative pages and execute actions reserved for administrators.
- 9.8 Critical severity
customer_support_system: Improper Neutralization of Special Elements used in an SQL Command
Customer Support System v1 was discovered to contain a SQL injection vulnerability via the subject parameter at /customer_support/ajax.php?action=save_ticket.
- 8.8 High severity
customer_support_system: Improper Neutralization of Special Elements used in an SQL Command
Customer Support System v1 was discovered to contain a SQL injection vulnerability via the lastname parameter at /customer_support/ajax.php?action=save_user.
- 9.8 Critical severity
customer_support_system: Improper Neutralization of Special Elements used in an SQL Command
Customer Support System v1 was discovered to contain a SQL injection vulnerability via the username parameter at /customer_support/ajax.php?action=login.
- 7.5 High severity
customer_support_system: Improper Access Control
A directory listing vulnerability in Customer Support System v1 allows attackers to list directories and sensitive files within the application without requiring authorization.