Lead Management System Project

Records8All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical8CVSS 9.0–10.0

CVSS high0CVSS 7.0–8.9

Exploited now

Lead Management System Project records in CISA KEV

No Lead Management System Project vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Lead Management System 8 records HIGH

Records

8 records in Lead Management System · all components

TI-2022-23715 CVE-2022-47866 · GHSA-7gf5-5hgq-mfgh

Lead management system v1.0 is vulnerable to SQL Injection via the id parameter in removeBrand.php.

HIGH 82

Lead management system v1.0 is vulnerable to SQL Injection via the id parameter in removeBrand.php.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00899 Published 2023-01-11 No fix listed CWE-89

TI-2022-23714 CVE-2022-47865 · GHSA-jmx5-53v7-75mr

Lead Management System v1.0 is vulnerable to SQL Injection via the id parameter in removeOrder.php.

HIGH 82

Lead Management System v1.0 is vulnerable to SQL Injection via the id parameter in removeOrder.php.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00952 Published 2023-01-11 No fix listed CWE-89

TI-2022-23713 CVE-2022-47864 · GHSA-c4hh-96wh-qcjh

Lead Management System v1.0 is vulnerable to SQL Injection via the id parameter in removeCategories.php.

HIGH 82

Lead Management System v1.0 is vulnerable to SQL Injection via the id parameter in removeCategories.php.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00933 Published 2023-01-11 No fix listed CWE-89

TI-2022-23709 CVE-2022-47859 · GHSA-wfr4-c7jj-8xgp

Lead Management System v1.0 is vulnerable to SQL Injection via the user_id parameter in changePassword.php.

HIGH 82

Lead Management System v1.0 is vulnerable to SQL Injection via the user_id parameter in changePassword.php.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00881 Published 2023-01-11 No fix listed CWE-89

TI-2022-04448 CVE-2022-4855 · GHSA-gj84-9wpj-89h3

SourceCodester Lead Management System login.php sql injection

HIGH 82

A vulnerability, which was classified as critical, was found in SourceCodester Lead Management System 1.0.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.24641 Published 2022-12-30 No fix listed CWE-89

TI-2022-23712 CVE-2022-47862 · GHSA-jvrx-2595-gvqf

Lead Management System v1.0 is vulnerable to SQL Injection via the customer_id parameter in ajax_represent.php.

MEDIUM 51

Lead Management System v1.0 is vulnerable to SQL Injection via the customer_id parameter in ajax_represent.php.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00933 Published 2023-01-11 No fix listed CWE-89

TI-2022-23711 CVE-2022-47861 · GHSA-ghq7-9x63-pxqp

Lead Management System v1.0 is vulnerable to SQL Injection via the id parameter in removeLead.php.

MEDIUM 51

Lead Management System v1.0 is vulnerable to SQL Injection via the id parameter in removeLead.php.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00952 Published 2023-01-11 No fix listed CWE-89

TI-2022-23710 CVE-2022-47860 · GHSA-545j-p8hx-3wxg

Lead Management System v1.0 is vulnerable to SQL Injection via the id parameter in removeProduct.php.

MEDIUM 51

Lead Management System v1.0 is vulnerable to SQL Injection via the id parameter in removeProduct.php.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00899 Published 2023-01-11 No fix listed CWE-89

Open these records in search →

Critical	8
High	0
Medium	0
Low	0
No CVSS	0