← Database

CVE-2022-4136

CRITICAL CVSS: 9.8 Published: 2022-11-24 Modified: 2026-06-17

Description

Dangerous method exposed which can lead to RCE in qmpass/leadshop v1.4.15 allows an attacker to control the target host by calling any function in leadshop.php via the GET method.

Affected Platforms

Leadshop Leadshop

Weakness Type

CWE-749, NVD-CWE-Other

References