PHPGurukul

Records1122All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical133CVSS 9.0–10.0

CVSS high107CVSS 7.0–8.9

Exploited now

PHPGurukul records in CISA KEV

No PHPGurukul vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Hospital Management System 62 records HIGH Zoo Management System 37 records HIGH Art Gallery Management System 36 records HIGH Online Shopping Portal 33 records HIGH Online Fire Reporting System 32 records HIGH Complaint Management System 31 records HIGH Student Record System 29 records HIGH Beauty Parlour Management System 28 records HIGH

Records

19 records in Small Crm · all components

TI-2024-03444 CVE-2024-3691 · GHSA-hvcg-7mfp-56mm

PHPGurukul Small CRM Registration Page sql injection

HIGH 81

A vulnerability, which was classified as critical, has been found in PHPGurukul Small CRM 3.0.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00924 Published 2024-04-12 No fix listed CWE-89

TI-2025-10123 CVE-2025-11053 · GHSA-g4r8-9p96-4rpc

PHPGurukul Small CRM forgot-password.php sql injection

HIGH 72

A weakness has been identified in PHPGurukul Small CRM 4.0.

CVSS 4.0MEDIUM 6.9 Network No auth No interaction EPSS 0.00421 Published 2025-09-27 No fix listed CWE-74

TI-2025-09287 CVE-2025-10114 · GHSA-43ph-jrqh-7q2m

PHPGurukul Small CRM profile.php sql injection

HIGH 72

A vulnerability was found in PHPGurukul Small CRM 4.0.

CVSS 4.0MEDIUM 6.9 Network No auth No interaction EPSS 0.00417 Published 2025-09-09 No fix listed CWE-74

TI-2025-09762 CVE-2025-10664 · GHSA-97w5-j2x6-wrrm

PHPGurukul Small CRM create-ticket.php sql injection

HIGH 70

A vulnerability was determined in PHPGurukul Small CRM 4.0.

CVSS 4.0MEDIUM 6.9 Network No auth No interaction EPSS 0.00421 Published 2025-09-18 No fix listed CWE-74

TI-2025-09252 CVE-2025-10079 · GHSA-pcxv-wxvh-xp82

PHPGurukul Small CRM get-quote.php sql injection

HIGH 70

A flaw has been found in PHPGurukul Small CRM 4.0.

CVSS 4.0MEDIUM 6.9 Network No auth No interaction EPSS 0.00412 Published 2025-09-08 No fix listed CWE-74

TI-2025-04692 CVE-2025-5227 · GHSA-5p5c-x823-xmpj

PHPGurukul Small CRM manage-tickets.php sql injection

HIGH 70

A vulnerability was found in PHPGurukul Small CRM 3.0 and classified as critical.

CVSS 4.0MEDIUM 6.9 Network No auth No interaction EPSS 0.00487 Published 2025-05-27 No fix listed CWE-74

TI-2025-04691 CVE-2025-5226 · GHSA-98c5-fw58-qcpj

PHPGurukul Small CRM change-password.php sql injection

HIGH 70

A vulnerability has been found in PHPGurukul Small CRM 3.0 and classified as critical.

CVSS 4.0MEDIUM 6.9 Network No auth No interaction EPSS 0.00487 Published 2025-05-27 No fix listed CWE-74

TI-2024-29940 CVE-2024-44648 · GHSA-57q6-gccx-h4hr

PHPGurukul Small CRM 3.0 is vulnerable to SQL Injection via id and adminremark parameters in quote-details.php.

HIGH 70

PHPGurukul Small CRM 3.0 is vulnerable to SQL Injection via id and adminremark parameters in quote-details.php.

CVSS 3.1MEDIUM 6.5 Network No auth No interaction EPSS 0.00258 Published 2025-11-17 No fix listed CWE-89

TI-2024-29938 CVE-2024-44644 · GHSA-x7rr-7j6w-6hc8

PHPGurukul Small CRM 3.0 is vulnerable to SQL Injection via the frm_id and aremark parameters in manage-tickets.php.

HIGH 70

PHPGurukul Small CRM 3.0 is vulnerable to SQL Injection via the frm_id and aremark parameters in manage-tickets.php.

CVSS 3.1MEDIUM 6.5 Network No auth No interaction EPSS 0.00258 Published 2025-11-17 No fix listed CWE-89

TI-2024-29937 CVE-2024-44641 · GHSA-3x44-884c-cc67

PHPGurukul Small CRM 3.0 is vulnerable to SQL Injection via the oldpass parameter in change-password.php.

HIGH 70

PHPGurukul Small CRM 3.0 is vulnerable to SQL Injection via the oldpass parameter in change-password.php.

CVSS 3.1MEDIUM 6.5 Network No auth No interaction EPSS 0.00258 Published 2025-11-17 No fix listed CWE-89

TI-2025-32144 CVE-2025-50484 · GHSA-m2wf-77jj-chrw

Improper session invalidation in the component /crm/change-password.php of PHPGurukul…

MEDIUM 64

Improper session invalidation in the component /crm/change-password.php of PHPGurukul Small CRM v3.0 allows attackers to execute a session hijacking attack.

CVSS 3.1HIGH 7.1 Network No auth User interaction EPSS 0.00308 Published 2025-07-28 No fix listed CWE-613

TI-2024-29939 CVE-2024-44647 · GHSA-3qrj-m7m5-v2mm

PHPGurukul Small CRM 3.0 is vulnerable to Cross Site Scripting (XSS) via the aremark parameter in manage-tickets.php.

MEDIUM 60

PHPGurukul Small CRM 3.0 is vulnerable to Cross Site Scripting (XSS) via the aremark parameter in manage-tickets.php.

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.00241 Published 2025-11-17 No fix listed CWE-79

TI-2024-32290 CVE-2024-48170 · GHSA-mp4p-vfgp-m87p

PHPGurukul Small CRM 3.0 is vulnerable to Cross Site Scripting (XSS) via a crafted…

MEDIUM 58

PHPGurukul Small CRM 3.0 is vulnerable to Cross Site Scripting (XSS) via a crafted payload injected into the name in the profile.php.

CVSS 3.1MEDIUM 5.4 Network Low privileges User interaction EPSS 0.00231 Published 2025-02-10 No fix listed CWE-79

TI-2025-14037 CVE-2025-15390 · GHSA-vq3f-wjq8-v437

PHPGurukul Small CRM edit-user.php authorization

MEDIUM 57

A security flaw has been discovered in PHPGurukul Small CRM 4.0.

CVSS 4.0MEDIUM 5.3 Network Low privileges No interaction EPSS 0.00383 Published 2025-12-31 No fix listed CWE-862

TI-2024-12050 CVE-2024-13001 · GHSA-f7hf-xff8-mj5v

PHPGurukul Small CRM index.php sql injection

MEDIUM 57

A vulnerability was found in PHPGurukul Small CRM 1.0.

CVSS 4.0MEDIUM 5.3 Network Low privileges No interaction EPSS 0.00436 Published 2024-12-29 No fix listed CWE-74

TI-2025-09021 CVE-2025-9834 · GHSA-hm77-xmfq-6722

PHPGurukul Small CRM registration.php cross site scripting

MEDIUM 56

A flaw has been found in PHPGurukul Small CRM 4.0.

CVSS 4.0MEDIUM 5.1 Network Low privileges User interaction EPSS 0.00296 Published 2025-09-02 No fix listed CWE-79

TI-2024-03443 CVE-2024-3690 · GHSA-qx9v-vv72-3pmw

PHPGurukul Small CRM Change Password sql injection

MEDIUM 41

A vulnerability classified as critical was found in PHPGurukul Small CRM 3.0.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.01284 Published 2024-04-12 No fix listed CWE-89

TI-2024-12049 CVE-2024-13000 · GHSA-cc4m-2w6w-v644

PHPGurukul Small CRM quote-details.php sql injection

LOW 25

A vulnerability was found in PHPGurukul Small CRM 1.0 and classified as critical.

CVSS 4.0MEDIUM 5.3 Network Low privileges No interaction EPSS 0.00514 Published 2024-12-29 No fix listed CWE-74

TI-2024-12048 CVE-2024-12999 · GHSA-p7p8-8m5p-c79x

PHPGurukul Small CRM edit-user.php sql injection

LOW 25

A vulnerability has been found in PHPGurukul Small CRM 1.0 and classified as critical.

CVSS 4.0MEDIUM 5.3 Network Low privileges No interaction EPSS 0.00514 Published 2024-12-29 No fix listed CWE-74

Open these records in search →

Critical	133
High	107
Medium	877
Low	5
No CVSS	0