Cpe:2.3:a:oretnom23:customer_support_system:1.0:*:*:*:*:*:*:*

CVE-2023-49970 is a critical SQL injection vulnerability in the Customer Support System version 1.0 allowing unauthenticated attackers to execute arbitrary database commands via the 'subject' parameter.