PT-2023-19725 · Unknown · Simple Customer Relationship Management System
CVE-2023-24652
·
Publicado
2023-02-27
·
Atualizado
2025-06-27
CVSS v3.1
8.8
Alta
| Vetor | AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H |
Name of the Vulnerable Software and Affected Versions
Simple Customer Relationship Management System version 1.0
Description
The issue is related to a SQL injection vulnerability. This vulnerability can be exploited via the
Description parameter under the Create ticket function.Recommendations
For Simple Customer Relationship Management System version 1.0, consider restricting the use of the
Description parameter in the Create ticket function until a patch is available. Avoid using the Description parameter in the affected function to minimize the risk of exploitation.Exploit
Correção
SQL injection
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
Enumeração de Fraquezas
Identificadores relacionados
Produtos afetados
Simple Customer Relationship Management System