CVE-2023-49544: SQL Injection
A local file inclusion (LFI) in Customer Support System v1 allows attackers to include internal PHP files and gain unauthorized acces via manipulation of the page= parameter at /customersupport/index.php.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2023-49544?
CVE-2023-49544 is classified as a high severity vulnerability due to its potential for unauthorized access through local file inclusion.
How do I fix CVE-2023-49544?
To fix CVE-2023-49544, validate and sanitize the 'page' parameter input to prevent unauthorized file inclusion.
What are the potential impacts of exploiting CVE-2023-49544?
Exploiting CVE-2023-49544 can allow attackers to access sensitive internal PHP files, potentially compromising the entire application.
Which versions of the Customer Support System are affected by CVE-2023-49544?
CVE-2023-49544 affects version 1 of the Customer Support System.
Is there a way to mitigate the risks associated with CVE-2023-49544?
To mitigate risks associated with CVE-2023-49544, implement strict input validation and employ proper error handling to avoid file inclusion vulnerabilities.