4 matches found
CVE-2022-47859
Lead Management System v1.0 is vulnerable to SQL Injection via the userid parameter in changePassword.php...
9.8CVSS8AI score0.00872EPSS
SaveExploits1References1
CVE-2022-47859
Lead Management System v1.0 is vulnerable to SQL Injection via the userid parameter in changePassword.php...
9.9AI score0.00872EPSS
SaveExploits1References2
CVE-2022-47859
Lead Management System v1.0 is affected by a SQL Injection in the user_id parameter of changePassword.php. The CVE description and multiple connected records consistently identify the root cause as unsanitized/validated input in changePassword.php, enabling arbitrary SQL execution with high impac...
9.8CVSS9.8AI score0.00872EPSS
SaveExploits1References2Affected Software1
20