NetSight
critical9.8

CVE-2022-47859

Lead Management System v1.0 is vulnerable to SQL Injection via the user_id parameter in changePassword.php.

Impact

Lead Management System v1.0 is vulnerable to SQL Injection via the user_id parameter in changePassword.php.

Affected products

VendorProductAffected versions
Lead Management System ProjectLead Management System
Version 1.0

Weakness classification

References