oretnom23 Customer Support System 1.0
Approved changes feed: RSS · Atom
cpe:2.3:a:oretnom23:customer_support_system:1.0:*:*:*:*:*:*:*
part: a version: 1.0 update: *
| Vendor | Oretnom23 (bb7583fb-f029-599f-a8a3-33d64769aa1f) |
|---|---|
| Product | Customer Support System (083c1ff5-d38c-5e37-aeb3-8d39fa4a82c6) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from NVD CPE 2.0 feed |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2025-70141 |
vulnerable | 2026-06-08 07:43:16.902932 |
Details available
SourceCodester Customer Support System 1.0 contains an incorrect access control vulnerability in ajax.php. The AJAX dispatcher does not enforce authentication or authorization before invoking administrative methods in admin_class.php based on the action parameter. An unauthenticated remote attacker can perform sensitive operations such as creating customers and deleting users (including the admin account), as well as modifying or deleting other application records (tickets, departments, comments), resulting in unauthorized data modification.
Published: 2026-02-18T00:00:00.000Z
Updated: 2026-02-18T18:31:26.903Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-40729 |
vulnerable | 2026-06-08 07:25:05.432997 |
Reflected Cross-Site Scripting (XSS) vulnerability in Customer Support System
Reflected Cross-Site Scripting (XSS) in /customer_support/index.php in Customer Support System v1.0, which allows remote attackers to execute arbitrary code via the page parameter.
Published: 2025-06-16T08:30:21.480Z
Updated: 2025-06-16T16:04:42.675Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-40728 |
vulnerable | 2026-06-08 07:25:05.432417 |
SQL injection vulnerability in Customer Support System
SQL injection vulnerability in Customer Support System v1.0. This vulnerability allows an authenticated attacker to retrieve, create, update and delete databases via the id parameter in the /customer_support/manage_user.php endpoint.
Published: 2025-06-16T08:29:07.944Z
Updated: 2025-06-16T16:11:11.510Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-51281 |
vulnerable | 2026-06-08 06:16:17.313864 |
Details available
Cross Site Scripting vulnerability in Customer Support System v.1.0 allows a remote attacker to escalate privileges via a crafted script firstname, "lastname", "middlename", "contact" and address parameters.
Published: 2024-03-07T00:00:00.000Z
Updated: 2024-08-26T15:20:00.173Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-50070 |
vulnerable | 2026-06-08 06:16:15.547126 |
Details available
Sourcecodester Customer Support System 1.0 has multiple SQL injection vulnerabilities in /customer_support/ajax.php?action=save_ticket via department_id, customer_id, and subject.
Published: 2023-12-29T00:00:00.000Z
Updated: 2024-08-02T22:09:49.622Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-49978 |
vulnerable | 2026-06-08 06:16:10.857281 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-49977 |
vulnerable | 2026-06-08 06:16:10.856655 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-49976 |
vulnerable | 2026-06-08 06:16:10.856125 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-49974 |
vulnerable | 2026-06-08 06:16:10.855562 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-49973 |
vulnerable | 2026-06-08 06:16:10.854755 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-49971 |
vulnerable | 2026-06-08 06:16:10.854378 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-49970 |
vulnerable | 2026-06-08 06:16:10.853715 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-49969 |
vulnerable | 2026-06-08 06:16:10.853166 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-49968 |
vulnerable | 2026-06-08 06:16:10.852492 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-49548 |
vulnerable | 2026-06-08 06:14:29.163378 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-49547 |
vulnerable | 2026-06-08 06:14:29.162919 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-49546 |
vulnerable | 2026-06-08 06:14:29.162441 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-49545 |
vulnerable | 2026-06-08 06:14:29.161939 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-49544 |
vulnerable | 2026-06-08 06:14:29.161334 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.