CVE-2022-4136
Exposed Dangerous Method or Function in qmpaas/leadshop
Summary
Exposed Dangerous Method or Function in qmpaas/leadshop
Original description
The description as published by the source.
Dangerous method exposed which can lead to RCE in qmpass/leadshop v1.4.15 allows an attacker to control the target host by calling any function in leadshop.php via the GET method.
References
- advisory github.com
- advisory nvd.nist.gov
- patch github.com
- web huntr.dev