lead management system project vulnerabilities

Recent CVEs affecting lead management system project products. 8 tracked.

lead management system project has 8 tracked vulnerabilities, 7 critical. A fixed release or vendor patch exists for 0. Most recent: 2023-01-11. Highest priority: CVE-2022-4855 (score 60/100).

• CVE-2022-4855 HIGH 7.3 DOWNGRADE A vulnerability, which was classified as critical, was found in SourceCodester Lead Management System 1.0
• CVE-2022-47866 CRITICAL 9.8 DOWNGRADE Lead management system v1.0 is vulnerable to SQL Injection via the id parameter in removeBrand.php.
• CVE-2022-47865 CRITICAL 9.8 DOWNGRADE Lead Management System v1.0 is vulnerable to SQL Injection via the id parameter in removeOrder.php.
• CVE-2022-47864 CRITICAL 9.8 DOWNGRADE Lead Management System v1.0 is vulnerable to SQL Injection via the id parameter in removeCategories.php.
• CVE-2022-47862 CRITICAL 9.8 DOWNGRADE Lead Management System v1.0 is vulnerable to SQL Injection via the customer_id parameter in ajax_represent.php
• CVE-2022-47861 CRITICAL 9.8 DOWNGRADE Lead Management System v1.0 is vulnerable to SQL Injection via the id parameter in removeLead.php.
• CVE-2022-47860 CRITICAL 9.8 DOWNGRADE Lead Management System v1.0 is vulnerable to SQL Injection via the id parameter in removeProduct.php.
• CVE-2022-47859 CRITICAL 9.8 DOWNGRADE Lead Management System v1.0 is vulnerable to SQL Injection via the user_id parameter in changePassword.php.

FAQ

How do I fix lead management system project vulnerabilities?

Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.

Is lead management system project being exploited right now?

None of the tracked lead management system project CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.

Which lead management system project CVE should I patch first?

CVE-2022-4855 currently ranks highest (60/100): A vulnerability, which was classified as critical, was found in SourceCodester Lead Management System 1.0.

Products

• lead management system

RSS feed for lead management system project · ← Back to latest CVEs