Lead Management System SQL Injection Vulnerability (CNVD-2023-05743)

Lead management system is a lead management system developed by Mayuri K. The Lead Management System v1.0 version is vulnerable to SQL injection, which stems from the lack of validation of externally entered SQL statements in the id parameter of removeLead.php, which can be exploited by attackers to vulnerability can be exploited to execute illegal SQL commands to steal sensitive database data.