Vulnerabilities

TI-2025-14037 CVE-2025-15390 · GHSA-vq3f-wjq8-v437

PHPGurukul Small CRM edit-user.php authorization

MEDIUM 57

A security flaw has been discovered in PHPGurukul Small CRM 4.0.

CVSS 4.0MEDIUM 5.3 Network Low privileges No interaction EPSS 0.00383 Published 2025-12-31 No fix listed CWE-862

TI-2024-29940 CVE-2024-44648 · GHSA-57q6-gccx-h4hr

PHPGurukul Small CRM 3.0 is vulnerable to SQL Injection via id and adminremark parameters in quote-details.php.

HIGH 70

PHPGurukul Small CRM 3.0 is vulnerable to SQL Injection via id and adminremark parameters in quote-details.php.

CVSS 3.1MEDIUM 6.5 Network No auth No interaction EPSS 0.00258 Published 2025-11-17 No fix listed CWE-89

TI-2024-29939 CVE-2024-44647 · GHSA-3qrj-m7m5-v2mm

PHPGurukul Small CRM 3.0 is vulnerable to Cross Site Scripting (XSS) via the aremark parameter in manage-tickets.php.

MEDIUM 60

PHPGurukul Small CRM 3.0 is vulnerable to Cross Site Scripting (XSS) via the aremark parameter in manage-tickets.php.

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.00241 Published 2025-11-17 No fix listed CWE-79

TI-2024-29938 CVE-2024-44644 · GHSA-x7rr-7j6w-6hc8

PHPGurukul Small CRM 3.0 is vulnerable to SQL Injection via the frm_id and aremark parameters in manage-tickets.php.

HIGH 70

PHPGurukul Small CRM 3.0 is vulnerable to SQL Injection via the frm_id and aremark parameters in manage-tickets.php.

CVSS 3.1MEDIUM 6.5 Network No auth No interaction EPSS 0.00258 Published 2025-11-17 No fix listed CWE-89

TI-2024-29937 CVE-2024-44641 · GHSA-3x44-884c-cc67

PHPGurukul Small CRM 3.0 is vulnerable to SQL Injection via the oldpass parameter in change-password.php.

HIGH 70

PHPGurukul Small CRM 3.0 is vulnerable to SQL Injection via the oldpass parameter in change-password.php.

CVSS 3.1MEDIUM 6.5 Network No auth No interaction EPSS 0.00258 Published 2025-11-17 No fix listed CWE-89

TI-2025-10123 CVE-2025-11053 · GHSA-g4r8-9p96-4rpc

PHPGurukul Small CRM forgot-password.php sql injection

HIGH 72

A weakness has been identified in PHPGurukul Small CRM 4.0.

CVSS 4.0MEDIUM 6.9 Network No auth No interaction EPSS 0.00421 Published 2025-09-27 No fix listed CWE-74

TI-2025-09762 CVE-2025-10664 · GHSA-97w5-j2x6-wrrm

PHPGurukul Small CRM create-ticket.php sql injection

HIGH 70

A vulnerability was determined in PHPGurukul Small CRM 4.0.

CVSS 4.0MEDIUM 6.9 Network No auth No interaction EPSS 0.00421 Published 2025-09-18 No fix listed CWE-74

TI-2025-09287 CVE-2025-10114 · GHSA-43ph-jrqh-7q2m

PHPGurukul Small CRM profile.php sql injection

HIGH 72

A vulnerability was found in PHPGurukul Small CRM 4.0.

CVSS 4.0MEDIUM 6.9 Network No auth No interaction EPSS 0.00417 Published 2025-09-09 No fix listed CWE-74

TI-2025-09252 CVE-2025-10079 · GHSA-pcxv-wxvh-xp82

PHPGurukul Small CRM get-quote.php sql injection

HIGH 70

A flaw has been found in PHPGurukul Small CRM 4.0.

CVSS 4.0MEDIUM 6.9 Network No auth No interaction EPSS 0.00428 Published 2025-09-08 No fix listed CWE-74

TI-2025-09021 CVE-2025-9834 · GHSA-hm77-xmfq-6722

PHPGurukul Small CRM registration.php cross site scripting

MEDIUM 56

A flaw has been found in PHPGurukul Small CRM 4.0.

CVSS 4.0MEDIUM 5.1 Network Low privileges User interaction EPSS 0.00296 Published 2025-09-02 No fix listed CWE-79

TI-2025-32144 CVE-2025-50484 · GHSA-m2wf-77jj-chrw

Improper session invalidation in the component /crm/change-password.php of PHPGurukul…

MEDIUM 64

Improper session invalidation in the component /crm/change-password.php of PHPGurukul Small CRM v3.0 allows attackers to execute a session hijacking attack.

CVSS 3.1HIGH 7.1 Network No auth User interaction EPSS 0.00308 Published 2025-07-28 No fix listed CWE-613

TI-2025-04692 CVE-2025-5227 · GHSA-5p5c-x823-xmpj

PHPGurukul Small CRM manage-tickets.php sql injection

HIGH 70

A vulnerability was found in PHPGurukul Small CRM 3.0 and classified as critical.

CVSS 4.0MEDIUM 6.9 Network No auth No interaction EPSS 0.00487 Published 2025-05-27 No fix listed CWE-74

TI-2025-04691 CVE-2025-5226 · GHSA-98c5-fw58-qcpj

PHPGurukul Small CRM change-password.php sql injection

HIGH 70

A vulnerability has been found in PHPGurukul Small CRM 3.0 and classified as critical.

CVSS 4.0MEDIUM 6.9 Network No auth No interaction EPSS 0.00487 Published 2025-05-27 No fix listed CWE-74

TI-2024-32290 CVE-2024-48170 · GHSA-mp4p-vfgp-m87p

PHPGurukul Small CRM 3.0 is vulnerable to Cross Site Scripting (XSS) via a crafted…

MEDIUM 58

PHPGurukul Small CRM 3.0 is vulnerable to Cross Site Scripting (XSS) via a crafted payload injected into the name in the profile.php.

CVSS 3.1MEDIUM 5.4 Network Low privileges User interaction EPSS 0.00231 Published 2025-02-10 No fix listed CWE-79

TI-2024-12050 CVE-2024-13001 · GHSA-f7hf-xff8-mj5v

PHPGurukul Small CRM index.php sql injection

MEDIUM 57

A vulnerability was found in PHPGurukul Small CRM 1.0.

CVSS 4.0MEDIUM 5.3 Network Low privileges No interaction EPSS 0.00436 Published 2024-12-29 No fix listed CWE-74

TI-2024-12049 CVE-2024-13000 · GHSA-cc4m-2w6w-v644

PHPGurukul Small CRM quote-details.php sql injection

LOW 25

A vulnerability was found in PHPGurukul Small CRM 1.0 and classified as critical.

CVSS 4.0MEDIUM 5.3 Network Low privileges No interaction EPSS 0.00514 Published 2024-12-29 No fix listed CWE-74

TI-2024-12048 CVE-2024-12999 · GHSA-p7p8-8m5p-c79x

PHPGurukul Small CRM edit-user.php sql injection

LOW 25

A vulnerability has been found in PHPGurukul Small CRM 1.0 and classified as critical.

CVSS 4.0MEDIUM 5.3 Network Low privileges No interaction EPSS 0.00514 Published 2024-12-29 No fix listed CWE-74

TI-2024-03444 CVE-2024-3691 · GHSA-hvcg-7mfp-56mm

PHPGurukul Small CRM Registration Page sql injection

HIGH 81

A vulnerability, which was classified as critical, has been found in PHPGurukul Small CRM 3.0.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00924 Published 2024-04-12 No fix listed CWE-89

TI-2024-03443 CVE-2024-3690 · GHSA-qx9v-vv72-3pmw

PHPGurukul Small CRM Change Password sql injection

MEDIUM 41

A vulnerability classified as critical was found in PHPGurukul Small CRM 3.0.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.01284 Published 2024-04-12 No fix listed CWE-89

Vulnerabilities

Filters