{"id":"CVE-2022-4136","aliases":["EUVD-2022-51499","GHSA-cg3f-vv84-g4hr"],"status":"published","title":"Exposed Dangerous Method or Function in qmpaas/leadshop","description":"Dangerous method exposed which can lead to RCE in qmpass/leadshop v1.4.15 allows an attacker to control the target host by calling any function in leadshop.php via the GET method.","severity":{"version":"3.0","score":8.6,"vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:H/A:L","level":"high","assessor":"cna","from":"cve"},"epss":{"day":"2026-11-09","score":0.01019,"percentile":0.63615,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":false},"cwes":["CWE-749"],"published":"2022-11-24T00:00:00Z","modified":"2026-10-28T02:31:09Z","products":[{"vendor":"leadshop","product":"leadshop"},{"vendor":"qmpaas","product":"qmpaas/leadshop"}],"references":[{"url":"https://huntr.dev/bounties/fe418ae1-7c80-4d91-8a5a-923d60ba78c3","tags":["x_transferred","Exploit","Patch","Third Party Advisory","web"]},{"url":"https://github.com/qmpaas/leadshop/commit/f27e9ca5c93eaadda1097396b65c234b16186d67","tags":["x_transferred","Patch","Third Party Advisory","fix"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2022-4136","tags":["advisory"]},{"url":"https://github.com/advisories/GHSA-cg3f-vv84-g4hr"},{"url":"https://github.com/CVEProject/cvelistV5/tree/main/cves/2022/4xxx/CVE-2022-4136.json","tags":["advisory"]}],"sources":{"cve":[{"id":"CVE-2022-4136","title":"Exposed Dangerous Method or Function in qmpaas/leadshop","description":"Dangerous method exposed which can lead to RCE in qmpass/leadshop v1.4.15 allows an attacker to control the target host by calling any function in leadshop.php via the GET method.","status":"published","published":"2022-11-24T00:00:00Z","modified":"2025-04-14T17:48:17.48Z","cvss":[{"version":"3.0","score":8.6,"vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:H/A:L","level":"high","assessor":"cna"}],"cwes":["CWE-749"],"updated_at":"2026-11-02T14:34:37.599536Z"}],"euvd":[{"id":"EUVD-2022-51499","description":"Dangerous method exposed which can lead to RCE in qmpass/leadshop v1.4.15 allows an attacker to control the target host by calling any function in leadshop.php via the GET method.","status":"published","published":"2022-11-24T00:00:00Z","modified":"2025-04-14T17:48:17Z","cvss":[{"version":"3.0","score":8.6,"vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:H/A:L","level":"high"}],"updated_at":"2026-11-02T20:52:33.06705Z"}],"ghsa":[{"id":"GHSA-cg3f-vv84-g4hr","title":"Attackers can call any existing functions at will, control the target server to access, download,...","description":"Attackers can call any existing functions at will, control the target server to access, download, create files, delete files, etc. Access may make the server a dos server. Download, so that an attacker can download the PHP Trojan to the server. Creating and deleting will destroy normal services. More than ten IPs are using this service.","status":"published","published":"2022-11-24T09:30:22Z","modified":"2023-02-02T05:07:55Z","cvss":[{"version":"3.1","score":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical"}],"updated_at":"2026-11-02T14:52:37.555983Z"}],"nvd":[{"id":"CVE-2022-4136","description":"Dangerous method exposed which can lead to RCE in qmpass/leadshop v1.4.15 allows an attacker to control the target host by calling any function in leadshop.php via the GET method.","status":"published","published":"2022-11-24T08:15:09.173Z","modified":"2026-06-17T05:20:03.253Z","cvss":[{"version":"3.1","score":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical","assessor":"primary"},{"version":"3.0","score":8.6,"vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:H/A:L","level":"high","assessor":"secondary"}],"cwes":["CWE-749"],"updated_at":"2026-11-02T14:07:32.827264Z"}],"osv":[{"id":"CVE-2022-4136","title":"Exposed Dangerous Method or Function in qmpaas/leadshop","description":"Dangerous method exposed which can lead to RCE in qmpass/leadshop v1.4.15 allows an attacker to control the target host by calling any function in leadshop.php via the GET method.","status":"published","published":"2022-11-24T00:00:00Z","modified":"2026-10-28T02:31:09.980388455Z","cvss":[{"version":"3.0","score":8.6,"vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:H/A:L","level":"high"}],"cwes":["CWE-749"],"updated_at":"2026-11-02T15:44:26.860704Z"}]}}