TI-2022-03782 Aliases CVE-2022-4136 GHSA-cg3f-vv84-g4hr

Exposed Dangerous Method or Function in qmpaas/leadshop

HIGH 75CWE-749Published 2022-11-24 · Updated 2025-04-14

Key facts

Attack vector: Network
Privileges required: None
User interaction: None
Attack complexity: Low
Impact type: —
Confidentiality · integrity · availability: High · High · High
Fix status: Fixed

Attack profile from CVSS 3.1 · NVD. Fix status from CNA.

Summary

Dangerous method exposed which can lead to RCE in qmpass/leadshop v1.4.15 allows an attacker to control the target host by calling any function in leadshop.php via the GET method.

Why it matters now

Exploitation Proof of concept CISA SSVC · not in CISA KEV

EPSS 0.01019 63rd percentileScored 2026-11-07

Public exploit Yes 1 exploit referenceTagged by NVD

Fix Fixed qmpaas/leadshop (qmpaas): 1.4.16

SSVC decision points

CISA ADP · SSVC 2.0.3

Exploitation: Poc
Automatable: No
Technical impact: Partial

The decision (Track, Attend, Act) also depends on your mission and well-being impact; see CISA's SSVC guide.

Affected products

Vendor	Product	Affected versions	Fixed in	Status	Source
qmpaas	qmpaas/leadshop	before 1.4.16	1.4.16	Patch available	CNA

qmpaas/leadshop Vendorqmpaas Affected before 1.4.16 Fixed in 1.4.16 Patch available CNA

CPE configurations NVD · 1

CPE	Versions	Role	Vendor
cpe:2.3:a:leadshop:leadshop:1.4.15:::::::*	1.4.15	Vulnerable	Leadshop

cpe:2.3:a:leadshop:leadshop:1.4.15:*:*:*:*:*:*:* Versions 1.4.15 Vulnerable ·Leadshop

Remediation

Fix · CNA qmpaas/leadshop (qmpaas) Fixed in 1.4.16

Timeline

2026-10-02 Threatist record created from CVE-2022-4136
2026-10-03 Alias added: GHSA-cg3f-vv84-g4hr

References

Exploit 1

https://huntr.dev/bounties/fe418ae1-7c80-4d91-8a5a-923d60ba78c3

Patch 1

https://github.com/qmpaas/leadshop/commit/f27e9ca5c93eaadda1097396b65c234b16186d67

TI-2024-00679 Hecheng Leadshop leadshop.php deserialization CVSS 3.1CRITICAL 9.8

Sources

This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences