Lead Management System Project Lead Management System — known CVE vulnerabilities

Every CVE whose affected-product data names Lead Management System Project Lead Management System, ordered by CVSS severity, with EPSS exploit prediction and CISA KEV status.

CVEs (8)

• CVE-2022-47859 — CVSS 9.8 (critical): Lead Management System v1.0 is vulnerable to SQL Injection via the user_id parameter in changePassword.php.
• CVE-2022-47860 — CVSS 9.8 (critical): Lead Management System v1.0 is vulnerable to SQL Injection via the id parameter in removeProduct.php.
• CVE-2022-47861 — CVSS 9.8 (critical): Lead Management System v1.0 is vulnerable to SQL Injection via the id parameter in removeLead.php.
• CVE-2022-47862 — CVSS 9.8 (critical): Lead Management System v1.0 is vulnerable to SQL Injection via the customer_id parameter in ajax_represent.php.
• CVE-2022-47864 — CVSS 9.8 (critical): Lead Management System v1.0 is vulnerable to SQL Injection via the id parameter in removeCategories.php.
• CVE-2022-47865 — CVSS 9.8 (critical): Lead Management System v1.0 is vulnerable to SQL Injection via the id parameter in removeOrder.php.
• CVE-2022-47866 — CVSS 9.8 (critical): Lead management system v1.0 is vulnerable to SQL Injection via the id parameter in removeBrand.php.
• CVE-2022-4855 — CVSS 7.3 (high): A vulnerability, which was classified as critical, was found in SourceCodester Lead Management System 1.0. Affected is an unknown function…