CVE-2022-47865

Lead Management System v1.0 is vulnerable to SQL Injection via the id parameter in removeOrder.php.

Score

CVSS 3.1 9.8 Critical

Status

Modified - cve@mitre.org

Published

2023-01-11

Last modified

2025-04-09

Weaknesses

CWE-89

Affected products

• Lead Management System (Lead Management System Project)

References

• https://github.com/xiumulty/CVE/blob/main/Lead%20management%20system%20v1.0/sql%20in%20removeOrder.php.md
• https://www.sourcecodester.com/php/15933/lead-management-system-php-open-source-free-download.html