Read the docs

Leadshop

Records2All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical2CVSS 9.0–10.0
CVSS high0CVSS 7.0–8.9

Exploited now

Leadshop records in CISA KEV

No Leadshop vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records
Leadshop 2 records HIGH

Records

2 records in Leadshop · all components

TI-2022-03782 CVE-2022-4136 · GHSA-cg3f-vv84-g4hr

Exposed Dangerous Method or Function in qmpaas/leadshop

Priority HIGH 75

Dangerous method exposed which can lead to RCE in qmpass/leadshop v1.4.15 allows an attacker to control the target host by calling any function in leadshop.php via the GET method.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.01019 Published 2022-11-24 Fixed in 1.4.16 CWE-749
TI-2024-00679 CVE-2024-0739 · GHSA-h7fx-h2xw-6jjc

Hecheng Leadshop leadshop.php deserialization

Priority MEDIUM 50

A vulnerability, which was classified as critical, was found in Hecheng Leadshop up to 1.4.20.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00751 Published 2024-01-19 No fix listed CWE-502
Open these records in search →