Lead Management System SQL Injection Vulnerability (CNVD-2023-05739)

Lead management system is a lead management system developed by Mayuri K. The Lead Management System v1.0 version is vulnerable to SQL injection, which stems from a lack of validation of external input SQL statements in the customer_id parameter in ajax_represent.php. statement in ajax_represent.php, which can be exploited by attackers to execute illegal SQL commands to steal sensitive database data.