Vulnerabilidades do Phpgurukul Small Crm
🔔 Criar alerta RSS Verificador de versão
CVEs publicadas que afetam Phpgurukul Small Crm: 6 registro(s), com versões afetadas e correções.cpe:2.3:a:phpgurukul:small_crm
CVE-2025-15390
Alta · 8.8
CWE-862 31/12/2025
PHPGurukul Small CRM edit-user.php authorization
A security flaw has been discovered in PHPGurukul Small CRM 4.0. This impacts an unknown function of the file /admin/edit-user.php. The manipulation results in missing authorization. It is possible to launch the attack remotely. The exploit has been released to the public and may be used for attacks.
CVE-2024-44648
Média · 6.5
CWE-89 17/11/2025
SQL Injection em Phpgurukul Small Crm
PHPGurukul Small CRM 3.0 is vulnerable to SQL Injection via id and adminremark parameters in quote-details.php.
CVE-2024-44647
Média · 6.1
CWE-79 17/11/2025
Cross-site Scripting (XSS) em Phpgurukul Small Crm
PHPGurukul Small CRM 3.0 is vulnerable to Cross Site Scripting (XSS) via the aremark parameter in manage-tickets.php.
CVE-2024-44644
Média · 6.5
CWE-89 17/11/2025
SQL Injection em Phpgurukul Small Crm
PHPGurukul Small CRM 3.0 is vulnerable to SQL Injection via the frm_id and aremark parameters in manage-tickets.php.
CVE-2024-44641
Média · 6.5
CWE-89 17/11/2025
SQL Injection em Phpgurukul Small Crm
PHPGurukul Small CRM 3.0 is vulnerable to SQL Injection via the oldpass parameter in change-password.php.
CVE-2025-11053
Crítica · 9.8
CWE-89 27/09/2025
PHPGurukul Small CRM forgot-password.php sql injection
A weakness has been identified in PHPGurukul Small CRM 4.0. This affects an unknown function of the file /forgot-password.php. Executing manipulation of the argument email can lead to sql injection. The attack can be launched remotely. The exploit has been made available to the public and could be exploited.