CVE-2022-47864

Lead Management System v1.0 is vulnerable to SQL Injection via the id parameter in removeCategories.php...

CVE-2022-47865

Lead Management System v1.0 is vulnerable to SQL Injection via the id parameter in removeOrder.php...

CVE-2022-47860

Lead Management System v1.0 is vulnerable to SQL Injection via the id parameter in removeProduct.php...

CVE-2022-47859

Lead Management System v1.0 is vulnerable to SQL Injection via the userid parameter in changePassword.php...

CVE-2022-47862

Lead Management System v1.0 is vulnerable to SQL Injection via the customerid parameter in ajaxrepresent.php...

CVE-2022-47860

Lead Management System v1.0 is vulnerable to SQL Injection via the id parameter in removeProduct.php. Root cause: lack of input validation. Impact: potential access to/steal of database data; high severity (CVSS 3.1 base 9.8; Network attack, no auth, no user interaction). Exploitation details are...

CVE-2022-47862

The CVE-2022-47862 entry concerns Lead Management System v1.0, where the customer_id parameter in ajax_represent.php is vulnerable to SQL Injection. The provided documents consistently identify SQL Injection as the issue source without detailing exploits in the wild. CVSS metrics indicate a Criti...

CVE-2022-47864

CVE-2022-47864 affects Lead Management System v1.0 and is described as vulnerable to SQL injection via the id parameter in removeCategories.php. The underlying issue is inadequate input handling that allows an attacker to manipulate SQL queries, enabling potential unauthorized data access or modi...

CVE-2022-47865

CVE-2022-47865 affects Lead Management System v1.0, with a SQL Injection flaw in the removeOrder.php endpoint via the id parameter. Reported CVSS v3.1 base score 9.8 (CRITICAL; AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H). Exploitation and impact details are consistent across multiple sources in the conn...

PT-2023-15500 · Unknown · Lead Management System

Name of the Vulnerable Software and Affected Versions: Lead Management System version 1.0 Description: The issue concerns SQL Injection via the id parameter in the "removeOrder.php" endpoint. This allows for potential manipulation of database queries. No information is provided about the estimate...

PT-2023-15498 · Unknown · Lead Management System

Name of the Vulnerable Software and Affected Versions: Lead Management System version 1.0 Description: The issue concerns SQL Injection via the customer id parameter in the "ajax represent.php" file. This allows for potential manipulation of database queries. Recommendations: For Lead Management...

CVE-2022-47861

CVE-2022-47861 affects Lead Management System v1.0 due to an SQL Injection in the removeLead.php endpoint, exploitable via the id parameter. The root cause is lack of input validation for the id used in a database query, leading to potential unauthorized data access or modification. Documents con...

Lead Management System SQL注入漏洞

Lead management system is a lead management system developed by Mayuri K. A SQL injection vulnerability exists in Lead Management System v1.0, which stems from the lack of validation of external input SQL statements in the id parameter of removeOrder.php, and can be exploited by attackers to The...

Lead Management System SQL注入漏洞

Lead management system is a lead management system by Mayuri K. Personal developer. SQL injection vulnerability exists in Lead Management System v1.0, which stems from the lack of validation of externally entered SQL statements in the id parameter of removeCategories.php. An attacker could use th...

PT-2023-15497 · Unknown · Lead Management System

Name of the Vulnerable Software and Affected Versions: Lead Management System version 1.0 Description: The issue concerns SQL Injection via the id parameter in the "removeLead.php" endpoint. This allows for potential manipulation of database queries. Recommendations: For Lead Management System...

CVE-2022-47866

Lead management system v1.0 is vulnerable to SQL Injection via the id parameter in removeBrand.php...

PT-2023-15496 · Unknown · Lead Management System

Name of the Vulnerable Software and Affected Versions: Lead Management System version 1.0 Description: The issue concerns SQL Injection via the id parameter in the "removeProduct.php" endpoint. This allows for potential manipulation of database queries. Recommendations: For Lead Management System...

Lead Management System SQL注入漏洞

Lead management system is a lead management system developed by Mayuri K. The Lead Management System v1.0 version is vulnerable to SQL injection, which stems from the lack of validation of external input SQL statements in the id parameter of removeProduct.php, which could be used by attackers to...

CVE-2022-47859: Improper Neutralization of Special Elements used in an SQL Command

Lead Management System v1.0 is vulnerable to SQL Injection via the userid parameter in changePassword.php...

CVE-2022-47861: Improper Neutralization of Special Elements used in an SQL Command

Lead Management System v1.0 is vulnerable to SQL Injection via the id parameter in removeLead.php...