PHPGurukul Small CRM 3.0
Approved changes feed: RSS · Atom
cpe:2.3:a:phpgurukul:small_crm:3.0:*:*:*:*:*:*:*
part: a version: 3.0 update: *
| Vendor | Phpgurukul (43390843-85b8-5d5e-9218-29dc10c3657d) |
|---|---|
| Product | Small Crm (39f61984-c50a-5ca2-a59c-ebe634452869) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from NVD CPE 2.0 feed |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2025-5227 |
vulnerable | 2026-06-08 07:35:24.434566 |
PHPGurukul Small CRM manage-tickets.php sql injection
HIGH (7.3)
A vulnerability was found in PHPGurukul Small CRM 3.0 and classified as critical. This issue affects some unknown processing of the file /admin/manage-tickets.php. The manipulation of the argument aremark leads to sql injection. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. Other parameters might be affected as well.
Published: 2025-05-27T03:00:09.751Z
Updated: 2025-05-27T13:36:11.669Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-5226 |
vulnerable | 2026-06-08 07:35:24.434063 |
PHPGurukul Small CRM change-password.php sql injection
HIGH (7.3)
A vulnerability has been found in PHPGurukul Small CRM 3.0 and classified as critical. This vulnerability affects unknown code of the file /admin/change-password.php. The manipulation of the argument oldpass leads to sql injection. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. Other parameters might be affected as well.
Published: 2025-05-27T02:31:08.292Z
Updated: 2025-05-27T13:37:33.454Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-50484 |
vulnerable | 2026-06-08 07:31:10.948918 |
Details available
Improper session invalidation in the component /crm/change-password.php of PHPGurukul Small CRM v3.0 allows attackers to execute a session hijacking attack.
Published: 2025-07-28T00:00:00.000Z
Updated: 2026-07-05T16:06:53.067Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-48170 |
vulnerable | 2026-06-08 06:48:13.653961 |
Details available
PHPGurukul Small CRM 3.0 is vulnerable to Cross Site Scripting (XSS) via a crafted payload injected into the name in the profile.php.
Published: 2025-02-10T00:00:00.000Z
Updated: 2025-02-18T19:57:49.814Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-44648 |
vulnerable | 2026-06-08 06:45:54.100507 |
Details available
PHPGurukul Small CRM 3.0 is vulnerable to SQL Injection via id and adminremark parameters in quote-details.php.
Published: 2025-11-17T00:00:00.000Z
Updated: 2025-11-17T17:02:19.589Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-44647 |
vulnerable | 2026-06-08 06:45:54.100141 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-44644 |
vulnerable | 2026-06-08 06:45:54.099894 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-44641 |
vulnerable | 2026-06-08 06:45:54.099542 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-3691 |
vulnerable | 2026-06-08 06:43:51.228619 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-3690 |
vulnerable | 2026-06-08 06:43:51.228022 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.