Lead Management System v1.0 is vulnerable to SQL Injection via the id parameter in removeCategories.php.