Vulnerabilities

TI-2022-23715 CVE-2022-47866 · GHSA-7gf5-5hgq-mfgh

Lead management system v1.0 is vulnerable to SQL Injection via the id parameter in removeBrand.php.

HIGH 82

Lead management system v1.0 is vulnerable to SQL Injection via the id parameter in removeBrand.php.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00899 Published 2023-01-11 No fix listed CWE-89

TI-2022-23714 CVE-2022-47865 · GHSA-jmx5-53v7-75mr

HIGH 82

Lead Management System v1.0 is vulnerable to SQL Injection via the id parameter in removeOrder.php.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00952 Published 2023-01-11 No fix listed CWE-89

TI-2022-23713 CVE-2022-47864 · GHSA-c4hh-96wh-qcjh

HIGH 82

Lead Management System v1.0 is vulnerable to SQL Injection via the id parameter in removeCategories.php.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00933 Published 2023-01-11 No fix listed CWE-89

TI-2022-23712 CVE-2022-47862 · GHSA-jvrx-2595-gvqf

MEDIUM 51

Lead Management System v1.0 is vulnerable to SQL Injection via the customer_id parameter in ajax_represent.php.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00933 Published 2023-01-11 No fix listed CWE-89

TI-2022-23711 CVE-2022-47861 · GHSA-ghq7-9x63-pxqp

MEDIUM 51

Lead Management System v1.0 is vulnerable to SQL Injection via the id parameter in removeLead.php.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00952 Published 2023-01-11 No fix listed CWE-89

TI-2022-23710 CVE-2022-47860 · GHSA-545j-p8hx-3wxg

MEDIUM 51

Lead Management System v1.0 is vulnerable to SQL Injection via the id parameter in removeProduct.php.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00899 Published 2023-01-11 No fix listed CWE-89

TI-2022-23709 CVE-2022-47859 · GHSA-wfr4-c7jj-8xgp

HIGH 82

Lead Management System v1.0 is vulnerable to SQL Injection via the user_id parameter in changePassword.php.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00881 Published 2023-01-11 No fix listed CWE-89

TI-2022-04448 CVE-2022-4855 · GHSA-gj84-9wpj-89h3

HIGH 82

A vulnerability, which was classified as critical, was found in SourceCodester Lead Management System 1.0.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.24641 Published 2022-12-30 No fix listed CWE-89