Lucene search

[email protected]NVD:CVE-2022-47866

HistoryJan 11, 2023 - 2:15 p.m.

CVE-2022-47866

2023-01-1114:15:09

CWE-89

[email protected]

web.nvd.nist.gov

lead management system

sql injection

id parameter

removebrand.php

CVSS3

9.8

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

AI Score

9.8

Confidence

High

EPSS

0.002

Percentile

52.3%

JSON

Lead management system v1.0 is vulnerable to SQL Injection via the id parameter in removeBrand.php.

Affected configurations

Nvd

Node

lead_management_system_projectlead_management_systemMatch1.0

VendorProductVersionCPE
lead_management_system_projectlead_management_system1.0cpe:2.3:a:lead_management_system_project:lead_management_system:1.0:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
lead_management_system_project	lead_management_system	1.0	cpe:2.3:a:lead_management_system_project:lead_management_system:1.0:::::::*

References

github.com/xiumulty/CVE/blob/main/Lead%20management%20system%20v1.0/sql%20in%20removeBrand.php.md

www.sourcecodester.com/php/15933/lead-management-system-php-open-source-free-download.html

CVSS3

9.8

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

AI Score

9.8

Confidence

High

EPSS

0.002

Percentile

52.3%

JSON

Related for NVD:CVE-2022-47866

cvelist1 cnvd1 prion1 cve1