CVE-2023-50035

2023-12-2900:00:00

mitre

www.cve.org

php

sql injection

users login

AI Score

Confidence

High

EPSS

0.001

Percentile

33.0%

JSON

PHPGurukul Small CRM 3.0 is vulnerable to SQL Injection on the Users login panel because of “password” parameter is directly used in the SQL query without any sanitization and the SQL Injection payload being executed.

References

github.com/hackerhijeck/Exploited/blob/main/Small_CRM/SQL-Injection.md