Lucene search
K

21 matches found

CNVD
CNVD
added 2025/11/20 12:0 a.m.1 views

Small CRM manage-tickets.php file cross-site scripting vulnerability

Small CRM a customer relationship management system. Small CRM suffers from a cross-site scripting vulnerability that stems from the lack of effective filtering and escaping of user-supplied data in the aremark parameter of manage-tickets.php, which can be exploited to execute arbitrary Web scrip...

6.1CVSS6.3AI score0.00033EPSS
Exploits1References1
CNVD
CNVD
added 2025/11/20 12:0 a.m.2 views

Small CRM manage-tickets.php file SQL Injection Vulnerability

Small CRM a customer relationship management system. Small CRM suffers from a SQL injection vulnerability that originates from the lack of validation of externally entered SQL statements in the frmid and aremark parameters of manage-tickets.php. An attacker can exploit this vulnerability to execu...

6.5CVSS8.3AI score0.00037EPSS
Exploits1References1
RedhatCVE
RedhatCVE
added 2025/11/18 12:11 a.m.5 views

CVE-2024-44644

PHPGurukul Small CRM 3.0 is vulnerable to SQL Injection via the frmid and aremark parameters in manage-tickets.php...

6.5CVSS8.1AI score0.00037EPSS
Exploits1References1
RedhatCVE
RedhatCVE
added 2025/11/18 12:11 a.m.4 views

CVE-2024-44647

PHPGurukul Small CRM 3.0 is vulnerable to Cross Site Scripting XSS via the aremark parameter in manage-tickets.php...

6.1CVSS6.3AI score0.00033EPSS
Exploits1References1
EUVD
EUVD
added 2025/11/17 6:30 p.m.2 views

EUVD-2024-55090

PHPGurukul Small CRM 3.0 is vulnerable to Cross Site Scripting XSS via the aremark parameter in manage-tickets.php...

6.1CVSS5.7AI score0.00033EPSS
Exploits1References3
NVD
NVD
added 2025/11/17 5:15 p.m.1 views

CVE-2024-44647

PHPGurukul Small CRM 3.0 is vulnerable to Cross Site Scripting XSS via the aremark parameter in manage-tickets.php...

6.1CVSS0.00033EPSS
Exploits1References2
OSV
OSV
added 2025/11/17 5:15 p.m.1 views

CVE-2024-44647

PHPGurukul Small CRM 3.0 is vulnerable to Cross Site Scripting XSS via the aremark parameter in manage-tickets.php...

6.1CVSS5.8AI score0.00033EPSS
Exploits1References2
NVD
NVD
added 2025/11/17 5:15 p.m.2 views

CVE-2024-44644

PHPGurukul Small CRM 3.0 is vulnerable to SQL Injection via the frmid and aremark parameters in manage-tickets.php...

6.5CVSS0.00037EPSS
Exploits1References2
OSV
OSV
added 2025/11/17 5:15 p.m.1 views

CVE-2024-44644

PHPGurukul Small CRM 3.0 is vulnerable to SQL Injection via the frmid and aremark parameters in manage-tickets.php...

6.5CVSS5.8AI score0.00037EPSS
Exploits1References2
Cvelist
Cvelist
added 2025/11/17 12:0 a.m.3 views

CVE-2024-44647

PHPGurukul Small CRM 3.0 is vulnerable to Cross Site Scripting XSS via the aremark parameter in manage-tickets.php...

0.00033EPSS
Exploits1References2
CVE
CVE
added 2025/11/17 12:0 a.m.8 views

CVE-2024-44644

PHPGurukul Small CRM 3.0 is vulnerable to SQL Injection in manage-tickets.php via the frm_id and aremark parameters due to lack of input validation. Public descriptions from CNVD, RH, CNNVD and CVE records indicate an attacker could execute arbitrary SQL and potentially steal sensitive database d...

6.5CVSS7.6AI score0.00037EPSS
Exploits1References2Affected Software1
CNNVD
CNNVD
added 2025/11/17 12:0 a.m.2 views

PHPGurukul Small CRM 安全漏洞

Small CRM a customer relationship management system. Small CRM suffers from a SQL injection vulnerability that originates from the lack of validation of externally entered SQL statements in the frmid and aremark parameters of manage-tickets.php. An attacker can exploit this vulnerability to execu...

6.5CVSS8.2AI score0.00037EPSS
Exploits1References3
Vulnrichment
Vulnrichment
added 2025/11/17 12:0 a.m.3 views

CVE-2024-44644

PHPGurukul Small CRM 3.0 is vulnerable to SQL Injection via the frmid and aremark parameters in manage-tickets.php...

7.6AI score0.00037EPSS
Exploits1References2
Positive Technologies
Positive Technologies
added 2025/11/17 12:0 a.m.2 views

PT-2025-47163

Name of the Vulnerable Software and Affected Versions PHPGurukul Small CRM version 3.0 Description PHPGurukul Small CRM version 3.0 is susceptible to Cross Site Scripting XSS. The issue is located in the aremark parameter of the ‘manage-tickets.php’ file. Exploitation occurs through manipulation ...

6.1CVSS6.3AI score0.00033EPSS
Exploits1References5
CVE
CVE
added 2025/11/17 12:0 a.m.7 views

CVE-2024-44647

CVE-2024-44647 affects PHPGurukul Small CRM 3.0. The issue is a Cross-Site Scripting (XSS) vulnerability in the aremark parameter of manage-tickets.php, caused by insufficient filtering/escaping of user input. Impact is potential execution of arbitrary web scripts or HTML. Remediation: upgrade to...

6.1CVSS5.8AI score0.00033EPSS
Exploits1References2Affected Software1
Cvelist
Cvelist
added 2025/11/17 12:0 a.m.4 views

CVE-2024-44644

PHPGurukul Small CRM 3.0 is vulnerable to SQL Injection via the frmid and aremark parameters in manage-tickets.php...

0.00037EPSS
Exploits1References2
Vulnrichment
Vulnrichment
added 2025/11/17 12:0 a.m.1 views

CVE-2024-44647

PHPGurukul Small CRM 3.0 is vulnerable to Cross Site Scripting XSS via the aremark parameter in manage-tickets.php...

5.8AI score0.00033EPSS
Exploits1References2
CNNVD
CNNVD
added 2025/11/17 12:0 a.m.2 views

PHPGurukul Small CRM 安全漏洞

Small CRM a customer relationship management system. Small CRM suffers from a cross-site scripting vulnerability that stems from the lack of effective filtering and escaping of user-supplied data in the aremark parameter of manage-tickets.php, which can be exploited to execute arbitrary Web scrip...

6.1CVSS6.2AI score0.00033EPSS
Exploits1References3
CNVD
CNVD
added 2025/05/30 12:0 a.m.1 views

Small CRM /admin/manage-tickets.php File SQL Injection Vulnerability

Small CRM is a customer relationship management system. Small CRM suffers from a SQL injection vulnerability that originates from the lack of validation of externally entered SQL statements in the parameter aremark in the file /admin/manage-tickets.php. An attacker can exploit this vulnerability ...

7.5CVSS8.2AI score0.0015EPSS
Exploits1References1
OSV
OSV
added 2025/05/27 4:15 a.m.1 views

CVE-2025-5227

A vulnerability was found in PHPGurukul Small CRM 3.0 and classified as critical. This issue affects some unknown processing of the file /admin/manage-tickets.php. The manipulation of the argument aremark leads to sql injection. The attack may be initiated remotely. The exploit has been disclosed...

6.9CVSS5.8AI score
Exploits0References5
Rows per page
Query Builder