Small Crm

12 CVEs product

Monthly

CVE-2024-44648 MEDIUM POC This Week

PHPGurukul Small CRM 3.0 is vulnerable to SQL Injection via id and adminremark parameters in quote-details.php. Rated medium severity (CVSS 6.5), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available.

SQLi PHP Small Crm
NVD GitHub
CVSS 3.1
6.5
EPSS
0.0%
CVE-2024-44647 MEDIUM POC This Month

PHPGurukul Small CRM 3.0 is vulnerable to Cross Site Scripting (XSS) via the aremark parameter in manage-tickets.php. Rated medium severity (CVSS 6.1), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available.

PHP XSS Small Crm
NVD GitHub
CVSS 3.1
6.1
EPSS
0.1%
CVE-2024-44644 MEDIUM POC This Week

PHPGurukul Small CRM 3.0 is vulnerable to SQL Injection via the frm_id and aremark parameters in manage-tickets.php. Rated medium severity (CVSS 6.5), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available.

SQLi PHP Small Crm
NVD GitHub
CVSS 3.1
6.5
EPSS
0.0%
CVE-2024-44641 MEDIUM POC This Week

PHPGurukul Small CRM 3.0 is vulnerable to SQL Injection via the oldpass parameter in change-password.php. Rated medium severity (CVSS 6.5), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available.

SQLi PHP Small Crm
NVD GitHub
CVSS 3.1
6.5
EPSS
0.0%
CVE-2025-11053 MEDIUM POC This Week

A weakness has been identified in PHPGurukul Small CRM 4.0. Rated medium severity (CVSS 6.9), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available.

PHP SQLi Small Crm
NVD GitHub VulDB
CVSS 4.0
6.9
EPSS
0.0%
CVE-2025-10664 MEDIUM POC This Week

A vulnerability was determined in PHPGurukul Small CRM 4.0. Rated medium severity (CVSS 6.9), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available.

PHP SQLi Small Crm
NVD GitHub VulDB
CVSS 4.0
6.9
EPSS
0.0%
CVE-2025-10114 MEDIUM POC This Month

A vulnerability was found in PHPGurukul Small CRM 4.0. Rated medium severity (CVSS 6.9), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available.

PHP SQLi Small Crm
NVD GitHub VulDB
CVSS 4.0
6.9
EPSS
0.0%
CVE-2025-10079 MEDIUM POC This Month

A flaw has been found in PHPGurukul Small CRM 4.0. Rated medium severity (CVSS 6.9), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available.

PHP SQLi Small Crm
NVD GitHub VulDB
CVSS 4.0
6.9
EPSS
0.0%
CVE-2025-9834 MEDIUM POC This Month

A flaw has been found in PHPGurukul Small CRM 4.0. Rated medium severity (CVSS 5.1), this vulnerability is remotely exploitable, low attack complexity. Public exploit code available and no vendor patch available.

PHP XSS Small Crm
NVD GitHub VulDB
CVSS 4.0
5.1
EPSS
0.0%
CVE-2025-5227 MEDIUM POC This Week

A vulnerability was found in PHPGurukul Small CRM 3.0 and classified as critical.php. Rated medium severity (CVSS 6.9), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available.

PHP SQLi Small Crm
NVD GitHub VulDB
CVSS 4.0
6.9
EPSS
0.1%
CVE-2025-5226 MEDIUM POC This Week

A vulnerability has been found in PHPGurukul Small CRM 3.0 and classified as critical. Rated medium severity (CVSS 6.9), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available.

PHP SQLi Small Crm
NVD GitHub VulDB
CVSS 4.0
6.9
EPSS
0.1%
CVE-2024-48170 MEDIUM This Month

PHPGurukul Small CRM 3.0 is vulnerable to Cross Site Scripting (XSS) via a crafted payload injected into the name in the profile.php. Rated medium severity (CVSS 5.4), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.

PHP XSS Small Crm
NVD
CVSS 3.1
5.4
EPSS
0.3%
CVE-2024-44648
EPSS 0% CVSS 6.5
MEDIUM POC This Week

PHPGurukul Small CRM 3.0 is vulnerable to SQL Injection via id and adminremark parameters in quote-details.php. Rated medium severity (CVSS 6.5), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available.

SQLi PHP Small Crm
NVD GitHub
CVE-2024-44647
EPSS 0% CVSS 6.1
MEDIUM POC This Month

PHPGurukul Small CRM 3.0 is vulnerable to Cross Site Scripting (XSS) via the aremark parameter in manage-tickets.php. Rated medium severity (CVSS 6.1), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available.

PHP XSS Small Crm
NVD GitHub
CVE-2024-44644
EPSS 0% CVSS 6.5
MEDIUM POC This Week

PHPGurukul Small CRM 3.0 is vulnerable to SQL Injection via the frm_id and aremark parameters in manage-tickets.php. Rated medium severity (CVSS 6.5), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available.

SQLi PHP Small Crm
NVD GitHub
CVE-2024-44641
EPSS 0% CVSS 6.5
MEDIUM POC This Week

PHPGurukul Small CRM 3.0 is vulnerable to SQL Injection via the oldpass parameter in change-password.php. Rated medium severity (CVSS 6.5), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available.

SQLi PHP Small Crm
NVD GitHub
CVE-2025-11053
EPSS 0% CVSS 6.9
MEDIUM POC This Week

A weakness has been identified in PHPGurukul Small CRM 4.0. Rated medium severity (CVSS 6.9), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available.

PHP SQLi Small Crm
NVD GitHub VulDB
CVE-2025-10664
EPSS 0% CVSS 6.9
MEDIUM POC This Week

A vulnerability was determined in PHPGurukul Small CRM 4.0. Rated medium severity (CVSS 6.9), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available.

PHP SQLi Small Crm
NVD GitHub VulDB
CVE-2025-10114
EPSS 0% CVSS 6.9
MEDIUM POC This Month

A vulnerability was found in PHPGurukul Small CRM 4.0. Rated medium severity (CVSS 6.9), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available.

PHP SQLi Small Crm
NVD GitHub VulDB
CVE-2025-10079
EPSS 0% CVSS 6.9
MEDIUM POC This Month

A flaw has been found in PHPGurukul Small CRM 4.0. Rated medium severity (CVSS 6.9), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available.

PHP SQLi Small Crm
NVD GitHub VulDB
CVE-2025-9834
EPSS 0% CVSS 5.1
MEDIUM POC This Month

A flaw has been found in PHPGurukul Small CRM 4.0. Rated medium severity (CVSS 5.1), this vulnerability is remotely exploitable, low attack complexity. Public exploit code available and no vendor patch available.

PHP XSS Small Crm
NVD GitHub VulDB
CVE-2025-5227
EPSS 0% CVSS 6.9
MEDIUM POC This Week

A vulnerability was found in PHPGurukul Small CRM 3.0 and classified as critical.php. Rated medium severity (CVSS 6.9), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available.

PHP SQLi Small Crm
NVD GitHub VulDB
CVE-2025-5226
EPSS 0% CVSS 6.9
MEDIUM POC This Week

A vulnerability has been found in PHPGurukul Small CRM 3.0 and classified as critical. Rated medium severity (CVSS 6.9), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available.

PHP SQLi Small Crm
NVD GitHub VulDB
CVE-2024-48170
EPSS 0% CVSS 5.4
MEDIUM This Month

PHPGurukul Small CRM 3.0 is vulnerable to Cross Site Scripting (XSS) via a crafted payload injected into the name in the profile.php. Rated medium severity (CVSS 5.4), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.

PHP XSS Small Crm
NVD

This site uses cookies essential for authentication and security. No tracking or analytics cookies are used. Privacy Policy