Skip to content
CVE PROGRAM SOURCE RECORD8.6 High

CVE-2022-4136

Exposed Dangerous Method or Function in qmpaas/leadshop

Description

Dangerous method exposed which can lead to RCE in qmpass/leadshop v1.4.15 allows an attacker to control the target host by calling any function in leadshop.php via the GET method.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

qmpaas qmpaas/leadshop

  • unspecified to < 1.4.16affected

References