RULE(RULE ID:337786)

Rule General Information
Release Date: 2024-01-11
Rule Name: Customer Support System Save_department SQL Injection Vulnerability (CVE-2023-50071)
Severity:
CVE ID:
Rule Protection Details
Description: A Customer Support System is a customer support system that helps a business or company support customers after they have purchased a product. The Customer Support System version 1.0 has a security vulnerability due to the SQL injection vulnerability in file /Customer_Support/ajax.php.
Impact: An attacker can inject arbitrary sql commands to view or change the database of the target by exploiting the vulnerability successfully.
Affected OS: Windows, Linux, Others
Reference:
Solutions
Please contact the software vendor to update the software patch.