Lucene search
+L

2021 matches found

OSV
OSV
•added 2025/11/17 5:15 p.m.•13 views

CVE-2024-44647

PHPGurukul Small CRM 3.0 is vulnerable to Cross Site Scripting XSS via the aremark parameter in manage-tickets.php...

6.1CVSS5.8AI score0.00225EPSS
SaveExploits1References2
OSV
OSV
•added 2025/11/17 5:15 p.m.•8 views

CVE-2024-44644

PHPGurukul Small CRM 3.0 is vulnerable to SQL Injection via the frmid and aremark parameters in manage-tickets.php...

6.5CVSS5.8AI score0.0024EPSS
SaveExploits1References2
NVD
NVD
•added 2025/11/17 5:15 p.m.•13 views

CVE-2024-44644

PHPGurukul Small CRM 3.0 is vulnerable to SQL Injection via the frmid and aremark parameters in manage-tickets.php...

6.5CVSS0.0024EPSS
SaveExploits1References2
Positive Technologies
Positive Technologies
•added 2025/11/17 12:00 a.m.•15 views

PT-2025-47163

Name of the Vulnerable Software and Affected Versions PHPGurukul Small CRM version 3.0 Description PHPGurukul Small CRM version 3.0 is susceptible to Cross Site Scripting XSS. The issue is located in the aremark parameter of the ‘manage-tickets.php’ file. Exploitation occurs through manipulation ...

6.1CVSS6.3AI score0.00225EPSS
SaveExploits1References5
CNNVD
CNNVD
•added 2025/11/17 12:00 a.m.•11 views

PHPGurukul Small CRM 安全漏洞

Small CRM a customer relationship management system. Small CRM suffers from a cross-site scripting vulnerability that stems from the lack of effective filtering and escaping of user-supplied data in the aremark parameter of manage-tickets.php, which can be exploited to execute arbitrary Web scrip...

6.1CVSS6.2AI score0.00225EPSS
SaveExploits1References3
Positive Technologies
Positive Technologies
•added 2025/11/17 12:00 a.m.•12 views

PT-2025-47162

Name of the Vulnerable Software and Affected Versions PHPGurukul Small CRM version 3.0 Description The software is susceptible to a SQL Injection issue through the frm id and aremark parameters in the 'manage-tickets.php' file. This allows for potential unauthorized database access or modificatio...

6.5CVSS7.5AI score0.0024EPSS
SaveExploits1References5
CNNVD
CNNVD
•added 2025/11/17 12:00 a.m.•10 views

PHPGurukul Small CRM 安全漏洞

Small CRM a customer relationship management system. Small CRM suffers from a SQL injection vulnerability that originates from the lack of validation of externally entered SQL statements in the frmid and aremark parameters of manage-tickets.php. An attacker can exploit this vulnerability to execu...

6.5CVSS8.2AI score0.0024EPSS
SaveExploits1References3
Vulnrichment
Vulnrichment
•added 2025/11/17 12:00 a.m.•7 views

CVE-2024-44644

PHPGurukul Small CRM 3.0 is vulnerable to SQL Injection via the frmid and aremark parameters in manage-tickets.php...

7.6AI score0.0024EPSS
SaveExploits1References2
Cvelist
Cvelist
•added 2025/11/17 12:00 a.m.•19 views

CVE-2024-44647

PHPGurukul Small CRM 3.0 is vulnerable to Cross Site Scripting XSS via the aremark parameter in manage-tickets.php...

0.00225EPSS
SaveExploits1References2
Cvelist
Cvelist
•added 2025/11/17 12:00 a.m.•19 views

CVE-2024-44644

PHPGurukul Small CRM 3.0 is vulnerable to SQL Injection via the frmid and aremark parameters in manage-tickets.php...

0.0024EPSS
SaveExploits1References2
CVE
CVE
•added 2025/11/17 12:00 a.m.•24 views

CVE-2024-44647

PHPGurukul Small CRM version 3.0 is vulnerable to Cross-Site Scripting (XSS) . The flaw exists in the manage-tickets.php file due to a lack of effective filtering and escaping of user-supplied data within the aremark parameter. An attacker can exploit this by injecting a carefully crafted payload...

5.8AI score0.00225EPSS
SaveExploits1References2Affected Software1
Tenable Nessus
Tenable Nessus
•added 2025/11/13 12:00 a.m.•11 views

Siemens SIMATIC S7-1500 Authentication Bypass by Spoofing (CVE-2021-22890)

curl 7.63.0 to and including 7.75.0 includes vulnerability that allows a malicious HTTPS proxy to MITM a connection due to bad handling of TLS 1.3 session tickets. When using a HTTPS proxy and TLS 1.3, libcurl can confuse session tickets arriving from the HTTPS proxy but work as if they arrived...

4.3CVSS6.8AI score0.03141EPSS
SaveExploits1References6
EUVD
EUVD
•added 2025/11/11 3:31 p.m.•16 views

EUVD-2025-84353

HTML injection vulnerability found in Fairsketch's RISE CRM Framework v3.8.1, which consist of an HTML code injection due to lack of proper validation of user inputs by sending a POST request in parameter 'title' in '/tickets/save'...

5.1CVSS6.8AI score0.00162EPSS
SaveExploits0References2
NVD
NVD
•added 2025/11/11 1:15 p.m.•14 views

CVE-2025-41105

HTML injection vulnerability found in Fairsketch's RISE CRM Framework v3.8.1, which consist of an HTML code injection due to lack of proper validation of user inputs by sending a POST request in parameter 'title' in '/tickets/save'...

5.4CVSS0.00162EPSS
SaveExploits0References1
OSV
OSV
•added 2025/11/11 1:15 p.m.•18 views

CVE-2025-41105

HTML injection vulnerability found in Fairsketch's RISE CRM Framework v3.8.1, which consist of an HTML code injection due to lack of proper validation of user inputs by sending a POST request in parameter 'title' in '/tickets/save'...

5.4CVSS5.8AI score0.00162EPSS
SaveExploits0References1
CVE
CVE
•added 2025/11/11 12:19 p.m.•33 views

CVE-2025-41105

CVE-2025-41105 : HTML injection vulnerability in Fairsketch’s RISE CRM Framework v3.8.1 due to insufficient validation of user input. The issue arises when sending a POST request with the parameter 'title' to /tickets/save, enabling HTML injection. No exploit details, impacted version(s) or remed...

5.4CVSS6.9AI score0.00162EPSS
SaveExploits0References1Affected Software1
Vulnrichment
Vulnrichment
•added 2025/11/11 12:19 p.m.•12 views

CVE-2025-41105 Multiple vulnerabilities in Fairsketch's RISE CRM Framework

HTML injection vulnerability found in Fairsketch's RISE CRM Framework v3.8.1, which consist of an HTML code injection due to lack of proper validation of user inputs by sending a POST request in parameter 'title' in '/tickets/save'...

5.1CVSS6.9AI score0.00162EPSS
SaveExploits0References1
CNNVD
CNNVD
•added 2025/11/11 12:00 a.m.•14 views

Fairsketch RISE CRM Framework 跨站脚本漏洞

FairSketch Fairsketch RISE CRM Framework is a team management and customer relationship management framework from FairSketch, Inc. A cross-site scripting vulnerability exists in Fairsketch RISE CRM Framework version 3.8.1, which stems from insufficient validation of user input for the parameter...

5.4CVSS6.2AI score0.00162EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2025/11/11 12:00 a.m.•16 views

PT-2025-46333

HTML injection vulnerability found in Fairsketch's RISE CRM Framework v3.8.1, which consist of an HTML code injection due to lack of proper validation of user inputs by sending a POST request in parameter 'title' in '/tickets/save'...

5.1CVSS7.3AI score0.00162EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/11/11 12:00 a.m.•2 views

CVE-2025-41105: Improper Neutralization of Input During Web Page Generation

HTML injection vulnerability found in Fairsketch's RISE CRM Framework v3.8.1, which consist of an HTML code injection due to lack of proper validation of user inputs by sending a POST request in parameter 'title' in '/tickets/save'...

5.4CVSS5.8AI score0.00162EPSS
SaveExploits0References1
Rows per page
Query Builder