PatchTheCVElead management system vulnerabilities and fixes
Recent CVEs affecting lead management system, with upgrade or downgrade steps. 8 tracked.
Also searched as: leadmanagementsystem.
lead management system has 8 tracked vulnerabilities, 7 critical. A fixed release or vendor patch exists for 0. Most recent: 2023-01-11. Highest priority: CVE-2022-4855 (score 60/100).
- CVE-2022-4855 HIGH 7.3 DOWNGRADE A vulnerability, which was classified as critical, was found in SourceCodester Lead Management System 1.0
- CVE-2022-47866 CRITICAL 9.8 DOWNGRADE Lead management system v1.0 is vulnerable to SQL Injection via the id parameter in removeBrand.php.
- CVE-2022-47865 CRITICAL 9.8 DOWNGRADE Lead Management System v1.0 is vulnerable to SQL Injection via the id parameter in removeOrder.php.
- CVE-2022-47864 CRITICAL 9.8 DOWNGRADE Lead Management System v1.0 is vulnerable to SQL Injection via the id parameter in removeCategories.php.
- CVE-2022-47862 CRITICAL 9.8 DOWNGRADE Lead Management System v1.0 is vulnerable to SQL Injection via the customer_id parameter in ajax_represent.php
- CVE-2022-47861 CRITICAL 9.8 DOWNGRADE Lead Management System v1.0 is vulnerable to SQL Injection via the id parameter in removeLead.php.
- CVE-2022-47860 CRITICAL 9.8 DOWNGRADE Lead Management System v1.0 is vulnerable to SQL Injection via the id parameter in removeProduct.php.
- CVE-2022-47859 CRITICAL 9.8 DOWNGRADE Lead Management System v1.0 is vulnerable to SQL Injection via the user_id parameter in changePassword.php.
FAQ
How do I fix lead management system vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is lead management system being exploited right now?
None of the tracked lead management system CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which lead management system CVE should I patch first?
CVE-2022-4855 currently ranks highest (60/100): A vulnerability, which was classified as critical, was found in SourceCodester Lead Management System 1.0.