Lucene search

K
cnvdChina National Vulnerability DatabaseCNVD-2023-05741
HistoryJan 14, 2023 - 12:00 a.m.

Lead Management System SQL Injection Vulnerability (CNVD-2023-05741)

2023-01-1400:00:00
China National Vulnerability Database
www.cnvd.org.cn
11
lead management system
sql injection
validation
external input
exploited
attackers
sensitive database data

EPSS

0.002

Percentile

52.3%

Lead management system is a lead management system developed by Mayuri K. A SQL injection vulnerability exists in Lead Management System v1.0, which stems from the lack of validation of external input SQL statements in the id parameter of removeBrand.php, and can be exploited by attackers to The vulnerability executes illegal SQL commands to steal sensitive database data.

EPSS

0.002

Percentile

52.3%

Related for CNVD-2023-05741