CVE-2023-50070: ORETNOM23 Customer Support System

High severity, CVSS 8.8. EPSS: 0.8% chance of exploitation in the next 30 days.

Sourcecodester Customer Support System 1.0 has multiple SQL injection vulnerabilities in /customer_support/ajax.php?action=save_ticket via department_id, customer_id, and subject.

Affected products

• ORETNOM23 Customer Support System: version 1.0 only

Published 2023-12-29. Last modified 2026-06-17.