CVE-2023-49544

Publication date

2024-03-01 00:00:00

Family

mitre

State

PUBLISHED

Description

A local file inclusion (LFI) in Customer Support System v1 allows attackers to include internal PHP files and gain unauthorized acces via manipulation of the page= parameter at /customer_support/index.php.