CVE-2023-49544

Name of the Vulnerable Software and Affected Versions Customer Support System version v1

Description A local file inclusion issue allows attackers to include internal PHP files and gain unauthorized access by manipulating the page parameter at the "/customer support/index.php" API endpoint.

Recommendations For Customer Support System version v1, consider restricting access to the vulnerable API endpoint "/customer support/index.php" to minimize the risk of exploitation. As a temporary workaround, avoid using the page parameter in the affected endpoint until the issue is resolved.