Lucene search
+L

6 matches found

CVE
CVE
•added 2025/09/08 2:32 a.m.•37 views

CVE-2025-10079

CVE-2025-10079 affects PHPGurukul Small CRM 4.0. The vulnerability is in the file /get-quote.php where manipulation of the contact parameter (Contact) enables a SQL injection. The issue can be exploited remotely, with exploit activity described as published and potentially usable in the wild. Doc...

9.8CVSS7.2AI score0.00412EPSS
SaveExploits1References5Affected Software1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/09/08 12:00 a.m.•0 views

CVE-2025-10079: Improper Neutralization of Special Elements used in an SQL Command

A flaw has been found in PHPGurukul Small CRM 4.0. Affected by this vulnerability is an unknown functionality of the file /get-quote.php. Executing manipulation of the argument Contact can lead to sql injection. The attack can be executed remotely. The exploit has been published and may be used...

9.8CVSS5.6AI score0.00412EPSS
SaveExploits1References1
RedhatCVE
RedhatCVE
•added 2025/02/14 10:17 a.m.•13 views

CVE-2023-24204

SQL injection vulnerability in SourceCodester Simple Customer Relationship Management System v1.0 allows attacker to execute arbitrary code via the name parameter in get-quote.php...

5.4CVSS8AI score0.00639EPSS
SaveExploits2References1
OSV
OSV
•added 2024/05/14 5:15 p.m.•22 views

CVE-2023-24204

SQL injection vulnerability in SourceCodester Simple Customer Relationship Management System v1.0 allows attacker to execute arbitrary code via the name parameter in get-quote.php...

5.4CVSS6.2AI score0.00639EPSS
SaveExploits3References3
NVD
NVD
•added 2024/05/14 5:15 p.m.•73 views

CVE-2023-24204

SQL injection vulnerability in SourceCodester Simple Customer Relationship Management System v1.0 allows attacker to execute arbitrary code via the name parameter in get-quote.php...

5.4CVSS8.2AI score0.00639EPSS
SaveExploits2References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/05/14 12:00 a.m.•1 views

CVE-2023-24204: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in SourceCodester Simple Customer Relationship Management System v1.0 allows attacker to execute arbitrary code via the name parameter in get-quote.php...

5.4CVSS6.5AI score0.00639EPSS
SaveExploits2References1
Rows per page
Query Builder