Geraldo Alcantara

**Name of the Vulnerable Software and Affected Versions** Sourcecodester Customer Support System version 1.0 **Description** The issue concerns multiple SQL injection vulnerabilities in the /customer support/ajax.php?action=save department endpoint via the `id` or `name` variables. This allows for potential exploitation by injecting malicious SQL code. **Recommendations** For Sourcecodester Customer Support System version 1.0, consider disabling the /customer support/ajax.php?action=save department endpoint until a patch is available. Restrict access to this endpoint to minimize the risk of exploitation. Avoid using the `id` and `name` variables in this endpoint until the issue is resolved. At the moment, there is no information about a newer version that contains a fix for this vulnerability.