Vulnerabilities

TI-2025-39436 CVE-2025-63716 · GHSA-rhj9-2v59-8ccx

The SourceCodester Leads Manager Tool v1.0 is vulnerable to Cross-Site Request Forgery…

MEDIUM 62

The SourceCodester Leads Manager Tool v1.0 is vulnerable to Cross-Site Request Forgery (CSRF) attacks that allow unauthorized state-changing operations.

CVSS 3.1MEDIUM 6.5 Network No auth No interaction EPSS 0.00159 Published 2025-11-07 No fix listed CWE-352

TI-2024-07364 CVE-2024-7942 · GHSA-hcrj-792g-qmqw

SourceCodester Leads Manager Tool update-leads.php cross site scripting

MEDIUM 57

A vulnerability has been found in SourceCodester Leads Manager Tool 1.0 and classified as problematic.

CVSS 4.0MEDIUM 5.3 Network Low privileges No interaction EPSS 0.00412 Published 2024-08-20 No fix listed CWE-79

TI-2024-07084 CVE-2024-7644 · GHSA-4w89-vx8c-pfjq

SourceCodester Leads Manager Tool Add Leads add-leads.php cross site scripting

MEDIUM 57

A vulnerability was found in SourceCodester Leads Manager Tool 1.0.

CVSS 4.0MEDIUM 5.3 Network Low privileges No interaction EPSS 0.0069 Published 2024-08-09 No fix listed CWE-79

TI-2024-07083 CVE-2024-7643 · GHSA-6g84-pmf4-c36r

SourceCodester Leads Manager Tool Delete Leads delete-leads.php sql injection

MEDIUM 57

A vulnerability was found in SourceCodester Leads Manager Tool 1.0 and classified as critical.

CVSS 4.0MEDIUM 5.3 Network Low privileges No interaction EPSS 0.00891 Published 2024-08-09 No fix listed CWE-89

Vulnerabilities

Filters

The SourceCodester Leads Manager Tool v1.0 is vulnerable to Cross-Site Request Forgery…

SourceCodester Leads Manager Tool update-leads.php cross site scripting

SourceCodester Leads Manager Tool Add Leads add-leads.php cross site scripting

SourceCodester Leads Manager Tool Delete Leads delete-leads.php sql injection