CVE-2022-47859

Lead Management System v1.0 is vulnerable to SQL Injection via the user_id parameter in changePassword.php.

CVE-2022-47865

Lead Management System v1.0 is vulnerable to SQL Injection via the id parameter in removeOrder.php.

CVE-2022-47861

Lead Management System v1.0 is vulnerable to SQL Injection via the id parameter in removeLead.php.

CVE-2022-47864

Lead Management System v1.0 is vulnerable to SQL Injection via the id parameter in removeCategories.php.

CVE-2022-47860

Lead Management System v1.0 is vulnerable to SQL Injection via the id parameter in removeProduct.php.

CVE-2022-47866

Lead management system v1.0 is vulnerable to SQL Injection via the id parameter in removeBrand.php.

CVE-2022-47862

Lead Management System v1.0 is vulnerable to SQL Injection via the customer_id parameter in ajax_represent.php.