Lead Management System v1.0 is vulnerable to SQL Injection via the user_id parameter in changePassword.php.

Published Jan 11, 2023 · Updated Apr 9, 2025 · Assigned by mitre