CVE-2023-49547: SQL Injection
Published Mar 4, 2024
·Updated
Customer Support System v1 was discovered to contain a SQL injection vulnerability via the username parameter at /customersupport/ajax.php?action=login.
Affected Software
1 affected component
oretnom23 Customer Support System=1.0
Event History
Mar 4, 2024
CVE Published
via MITRE·12:00 AM
Data Sourced
via MITRE·12:00 AM
Description
Mar 5, 2024
Data Sourced
via NVD·12:15 AM
DescriptionSeverityWeakness
Frequently Asked Questions
1
What is the severity of CVE-2023-49547?
CVE-2023-49547 is classified as a high severity SQL injection vulnerability.
2
What does CVE-2023-49547 exploit?
CVE-2023-49547 exploits the username parameter at /customer_support/ajax.php?action=login.
3
How do I fix CVE-2023-49547?
To fix CVE-2023-49547, sanitize and validate user input to prevent SQL injection.
4
Which version of Customer Support System is affected by CVE-2023-49547?
CVE-2023-49547 affects Customer Support System version 1.0.
5
What could be the impact of CVE-2023-49547 if exploited?
If exploited, CVE-2023-49547 could allow attackers to execute arbitrary SQL commands on the database.