791 matches found
PT-2023-15499 · Unknown · Lead Management System
Name of the Vulnerable Software and Affected Versions: Lead Management System version 1.0 Description: The issue concerns SQL Injection via the id parameter in the "removeCategories.php" file. This allows for potential manipulation of database queries. Recommendations: For Lead Management System...
CVE-2022-47865
CVE-2022-47865 affects Lead Management System v1.0, with a SQL Injection flaw in the removeOrder.php endpoint via the id parameter. Reported CVSS v3.1 base score 9.8 (CRITICAL; AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H). Exploitation and impact details are consistent across multiple sources in the conn...
CVE-2022-47859
Lead Management System v1.0 is vulnerable to SQL Injection via the userid parameter in changePassword.php...
PT-2023-15498 · Unknown · Lead Management System
Name of the Vulnerable Software and Affected Versions: Lead Management System version 1.0 Description: The issue concerns SQL Injection via the customer id parameter in the "ajax represent.php" file. This allows for potential manipulation of database queries. Recommendations: For Lead Management...
CVE-2022-47861
Lead Management System v1.0 is vulnerable to SQL Injection via the id parameter in removeLead.php...
Lead Management System SQL注入漏洞
Lead management system is a lead management system developed by Mayuri K. The Lead Management System v1.0 version is vulnerable to SQL injection, which stems from the lack of validation of external input SQL statements in the id parameter of removeProduct.php, which could be used by attackers to...
Lead Management System SQL注入漏洞
Lead management system is a lead management system developed by Mayuri K. The Lead Management System v1.0 version is vulnerable to SQL injection, which stems from the lack of validation of external input SQL statements in the userid parameter of changePassword.php. An attacker could use this...
CVE-2022-47860
Lead Management System v1.0 is vulnerable to SQL Injection via the id parameter in removeProduct.php. Root cause: lack of input validation. Impact: potential access to/steal of database data; high severity (CVSS 3.1 base 9.8; Network attack, no auth, no user interaction). Exploitation details are...
CVE-2022-47859
Lead Management System v1.0 is affected by a SQL Injection in the user_id parameter of changePassword.php. The CVE description and multiple connected records consistently identify the root cause as unsanitized/validated input in changePassword.php, enabling arbitrary SQL execution with high impac...
PT-2023-15494 · Unknown · Lead Management System
Name of the Vulnerable Software and Affected Versions: Lead Management System version 1.0 Description: The issue concerns SQL Injection via the user id parameter in the changePassword.php file. This allows for potential unauthorized access and manipulation of data. Recommendations: For Lead...
CVE-2022-47860
Lead Management System v1.0 is vulnerable to SQL Injection via the id parameter in removeProduct.php...
CVE-2022-47862
Lead Management System v1.0 is vulnerable to SQL Injection via the customerid parameter in ajaxrepresent.php...
Lead Management System SQL注入漏洞
Lead management system is a lead management system developed by Mayuri K. The Lead Management System v1.0 version is vulnerable to SQL injection, which stems from the lack of validation of externally entered SQL statements in the id parameter of removeLead.php, which can be exploited by attackers...
PT-2023-15496 · Unknown · Lead Management System
Name of the Vulnerable Software and Affected Versions: Lead Management System version 1.0 Description: The issue concerns SQL Injection via the id parameter in the "removeProduct.php" endpoint. This allows for potential manipulation of database queries. Recommendations: For Lead Management System...
PT-2023-15497 · Unknown · Lead Management System
Name of the Vulnerable Software and Affected Versions: Lead Management System version 1.0 Description: The issue concerns SQL Injection via the id parameter in the "removeLead.php" endpoint. This allows for potential manipulation of database queries. Recommendations: For Lead Management System...
Lead Management System SQL注入漏洞
Lead management system is a lead management system developed by Mayuri K. A SQL injection vulnerability exists in Lead Management System v1.0, which stems from the lack of validation of external input SQL statements in the id parameter of removeOrder.php, and can be exploited by attackers to The...
PT-2023-15500 · Unknown · Lead Management System
Name of the Vulnerable Software and Affected Versions: Lead Management System version 1.0 Description: The issue concerns SQL Injection via the id parameter in the "removeOrder.php" endpoint. This allows for potential manipulation of database queries. No information is provided about the estimate...
CVE-2022-47864
Lead Management System v1.0 is vulnerable to SQL Injection via the id parameter in removeCategories.php...
