Codester vulnerabilities

Products

• WBiz Desk 1

Latest Codester CVEs

Newest publication first

1. CVE-2023-53935 WBiz Desk 1.2 SQL Injection Vulnerability via ticket.php Parameter

   Published 2025-12-18

   Medium·CVSS 5.3

   WBiz Desk 1.2 contains a SQL injection vulnerability that allows non-admin users to manipulate database queries through the 'tk' parameter in ticket.php. Attackers can inject crafted SQL statements using UNION-based techniques to extract sensitive database information by sending...

Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.