Lead management system v1.0 is vulnerable to SQL Injection via the id parameter in removeBrand.php.
CWE-89, CWE-89