CVE-2022-47865

Lead Management System v1.0 is vulnerable to SQL Injection via the id parameter in removeOrder.php...

PT-2023-15501 · Unknown · Lead Management System

Name of the Vulnerable Software and Affected Versions: Lead management system version 1.0 Description: The issue concerns SQL Injection via the id parameter in the "removeBrand.php" endpoint. This allows for potential manipulation of database queries. No information is provided about the estimate...

Lead Management System SQL注入漏洞

Lead management system is a lead management system developed by Mayuri K. The Lead Management System v1.0 version is vulnerable to SQL injection, which stems from the lack of validation of externally entered SQL statements in the id parameter of removeLead.php, which can be exploited by attackers...

CVE-2022-47860

Lead Management System v1.0 is vulnerable to SQL Injection via the id parameter in removeProduct.php...

PT-2023-15497 · Unknown · Lead Management System

Name of the Vulnerable Software and Affected Versions: Lead Management System version 1.0 Description: The issue concerns SQL Injection via the id parameter in the "removeLead.php" endpoint. This allows for potential manipulation of database queries. Recommendations: For Lead Management System...

CVE-2022-47865

Lead Management System v1.0 is vulnerable to SQL Injection via the id parameter in removeOrder.php...

CVE-2022-47864

Lead Management System v1.0 is vulnerable to SQL Injection via the id parameter in removeCategories.php...

CVE-2022-47862

The CVE-2022-47862 entry concerns Lead Management System v1.0, where the customer_id parameter in ajax_represent.php is vulnerable to SQL Injection. The provided documents consistently identify SQL Injection as the issue source without detailing exploits in the wild. CVSS metrics indicate a Criti...

CVE-2022-47862

Lead Management System v1.0 is vulnerable to SQL Injection via the customerid parameter in ajaxrepresent.php...

PT-2023-15496 · Unknown · Lead Management System

Name of the Vulnerable Software and Affected Versions: Lead Management System version 1.0 Description: The issue concerns SQL Injection via the id parameter in the "removeProduct.php" endpoint. This allows for potential manipulation of database queries. Recommendations: For Lead Management System...

PT-2023-15500 · Unknown · Lead Management System

Name of the Vulnerable Software and Affected Versions: Lead Management System version 1.0 Description: The issue concerns SQL Injection via the id parameter in the "removeOrder.php" endpoint. This allows for potential manipulation of database queries. No information is provided about the estimate...

CVE-2022-47862

Lead Management System v1.0 is vulnerable to SQL Injection via the customerid parameter in ajaxrepresent.php...

CVE-2022-47861

CVE-2022-47861 affects Lead Management System v1.0 due to an SQL Injection in the removeLead.php endpoint, exploitable via the id parameter. The root cause is lack of input validation for the id used in a database query, leading to potential unauthorized data access or modification. Documents con...

Lead Management System SQL Injection Vulnerability

Lead management system is a lead management system developed by Mayuri K. The Lead Management System version 1.0 is vulnerable to SQL injection, which stems from the lack of validation of external input SQL statements in the login.php parameter username, and can be exploited by attackers to The...

CVE-2022-4855

A vulnerability, which was classified as critical, was found in SourceCodester Lead Management System 1.0. Affected is an unknown function of the file login.php. The manipulation of the argument username leads to sql injection. It is possible to launch the attack remotely. The exploit has been...

CVE-2022-4855

A vulnerability, which was classified as critical, was found in SourceCodester Lead Management System 1.0. Affected is an unknown function of the file login.php. The manipulation of the argument username leads to sql injection. It is possible to launch the attack remotely. The exploit has been...

Sql injection

A vulnerability, which was classified as critical, was found in SourceCodester Lead Management System 1.0. Affected is an unknown function of the file login.php. The manipulation of the argument username leads to sql injection. It is possible to launch the attack remotely. The exploit has been...

CVE-2022-4855 SourceCodester Lead Management System login.php sql injection

A vulnerability, which was classified as critical, was found in SourceCodester Lead Management System 1.0. Affected is an unknown function of the file login.php. The manipulation of the argument username leads to sql injection. It is possible to launch the attack remotely. The exploit has been...

CVE-2022-4855

CVE-2022-4855 affects SourceCodester Lead Management System 1.0. The login.php username parameter is vulnerable to SQL injection, enabling remote exploitation. Multiple sources confirm the issue is due to lack of input validation in login.php, with public disclosure of the exploit. Impact is desc...

CVE-2022-4855 SourceCodester Lead Management System login.php sql injection

A vulnerability, which was classified as critical, was found in SourceCodester Lead Management System 1.0. Affected is an unknown function of the file login.php. The manipulation of the argument username leads to sql injection. It is possible to launch the attack remotely. The exploit has been...