Lucene search
+L

15 matches found

NVD
NVD
•added 2026/08/05 2:16 a.m.•29 views

CVE-2026-18896

A vulnerability was determined in lavkush-maurya Student-Registration-System 1.0. The affected element is an unknown function of the file /student/changepass.php. Executing a manipulation of the argument oldpass can lead to sql injection. It is possible to launch the attack remotely. The exploit...

6.5CVSS0.00316EPSS
SaveExploits0References5
attackerkb
attackerkb
•added 2026/08/05 1:45 a.m.•23 views

CVE-2026-18896

A vulnerability was determined in lavkush-maurya Student-Registration-System 1.0. The affected element is an unknown function of the file /student/changepass.php. Executing a manipulation of the argument oldpass can lead to sql injection. It is possible to launch the attack remotely. The exploit...

6.5CVSS6.4AI score0.00316EPSS
SaveExploits0References5Affected Software1
CVE
CVE
•added 2026/08/05 1:45 a.m.•71 views

CVE-2026-18896

The CVE-2026-18896 entry concerns lavkush-maurya Student-Registration-System 1.0. The vulnerable component is an unknown function in /student/changepass.php, where manipulating the oldpass parameter enables SQL injection. This vulnerability is described as exploitable remotely and publicly disclo...

6.5CVSS6.4AI score0.00316EPSS
SaveExploits0References5
CNVD
CNVD
•added 2025/11/20 12:00 a.m.•24 views

Small CRM change-password.php File SQL Injection Vulnerability

Small CRM a customer relationship management system. Small CRM suffers from a SQL injection vulnerability that originates from the lack of validation of externally entered SQL statements in the oldpass parameter of change-password.php. This vulnerability can be exploited by an attacker to execute...

6.5CVSS6.2AI score0.00258EPSS
SaveExploits1References1
RedhatCVE
RedhatCVE
•added 2025/11/18 12:11 a.m.•29 views

CVE-2024-44641

PHPGurukul Small CRM 3.0 is vulnerable to SQL Injection via the oldpass parameter in change-password.php...

6.5CVSS5.9AI score0.00258EPSS
SaveExploits1References1
EUVD
EUVD
•added 2025/11/17 6:30 p.m.•16 views

EUVD-2024-55087

PHPGurukul Small CRM 3.0 is vulnerable to SQL Injection via the oldpass parameter in change-password.php...

6.5CVSS5.9AI score0.00258EPSS
SaveExploits1References3
osv_cve
osv_cve
•added 2025/11/17 5:15 p.m.•23 views

CVE-2024-44641

PHPGurukul Small CRM 3.0 is vulnerable to SQL Injection via the oldpass parameter in change-password.php...

6.5CVSS5.9AI score0.00258EPSS
SaveExploits1References2
CNNVD
CNNVD
•added 2025/11/17 12:00 a.m.•21 views

PHPGurukul Small CRM security vulnerability

Small CRM a customer relationship management system. Small CRM suffers from a SQL injection vulnerability that originates from the lack of validation of externally entered SQL statements in the oldpass parameter of change-password.php. This vulnerability can be exploited by an attacker to execute...

6.5CVSS6.2AI score0.00258EPSS
SaveExploits1References3
Vulnrichment
Vulnrichment
•added 2025/11/17 12:00 a.m.•11 views

CVE-2024-44641

PHPGurukul Small CRM 3.0 is vulnerable to SQL Injection via the oldpass parameter in change-password.php...

5.9AI score0.00258EPSS
SaveExploits1References2
Positive Technologies
Positive Technologies
•added 2025/11/17 12:00 a.m.•28 views

PT-2025-47161

Name of the Vulnerable Software and Affected Versions PHPGurukul Small CRM version 3.0 Description PHPGurukul Small CRM version 3.0 contains a SQL Injection flaw. This issue affects the change-password.php file through the oldpass parameter. The flaw could allow an attacker to inject malicious SQ...

6.5CVSS5.9AI score0.00258EPSS
SaveExploits1References5
CVE
CVE
•added 2025/11/17 12:00 a.m.•39 views

CVE-2024-44641

PHPGurukul Small CRM version 3.0 is vulnerable to a SQL Injection flaw within the change-password.php file. The root cause is a lack of proper validation for externally entered SQL statements provided via the oldpass parameter. An attacker could exploit this vulnerability to execute illegal SQL c...

6.5CVSS5.9AI score0.00258EPSS
SaveExploits1References2Affected Software1
CNVD
CNVD
•added 2025/05/30 12:00 a.m.•23 views

Small CRM /admin/change-password.php File SQL Injection Vulnerability

Small CRM is a customer relationship management system. Small CRM suffers from a SQL injection vulnerability, which originates from the lack of validation of externally entered SQL statements in the parameter oldpass in the file /admin/change-password.php. An attacker can exploit this vulnerabili...

7.5CVSS7.5AI score0.00487EPSS
SaveExploits1References1
osv_cve
osv_cve
•added 2023/02/27 4:15 p.m.•27 views

CVE-2023-24653

Simple Customer Relationship Management System v1.0 was discovered to contain a SQL injection vulnerability via the oldpass parameter under the Change Password function...

8.8CVSS7.3AI score0.01048EPSS
SaveExploits1References3
NVD
NVD
•added 2023/02/27 4:15 p.m.•48 views

CVE-2023-24653

Simple Customer Relationship Management System v1.0 was discovered to contain a SQL injection vulnerability via the oldpass parameter under the Change Password function...

8.8CVSS9AI score0.01048EPSS
SaveExploits1References3
CNNVD
CNNVD
•added 2023/02/27 12:00 a.m.•21 views

Simple Customer Relationship Management SQL injection vulnerability

Simple Customer Relationship Management Simple CRM is a simple customer relationship management system by Carlo Montero, a personal developer. A security vulnerability exists in Simple Customer Relationship Management System v1.0, which stems from a SQL injection vulnerability via the parameter...

8.8CVSS8.2AI score0.01048EPSS
SaveExploits1References5
Rows per page
Query Builder