Small Crm Project Small Crm
7 CVEs affecting Small Crm Project Small Crm. Latest disclosed: 2023-12-29. Critical: 1, High: 1.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2023-50035 | Critical | 9.8 | 2023-12-29 | PHPGurukul Small CRM 3.0 is vulnerable to SQL Injection on the Users login panel because of "password" parameter is directly used in the SQL query without any… |
CVE-2020-5511 | High | 8.8 | 2020-01-08 | PHPGurukul Small CRM v2.0 was found vulnerable to authentication bypass via SQL injection when logging into the administrator login page. |
CVE-2023-34650 | Medium | 6.1 | 2023-06-28 | PHPgurukl Small CRM v.1.0 is vulnerable to Cross Site Scripting (XSS). |
CVE-2023-45394 | Medium | 5.4 | 2023-10-20 | Stored Cross-Site Scripting (XSS) vulnerability in the Company field in the "Request a Quote" Section of Small CRM v3.0 allows an attacker to store and execute… |
CVE-2023-44075 | Medium | 5.4 | 2023-10-04 | Cross Site Scripting vulnerability in Small CRM in PHP v.3.0 allows a remote attacker to execute arbitrary code via a crafted payload to the Address parameter. |
CVE-2023-43331 | Medium | 5.4 | 2023-09-27 | A cross-site scripting (XSS) vulnerability in the Add User function of Small CRM v3.0 allows attackers to execute arbitrary web scripts or HTML via a crafted p… |
CVE-2022-47073 | Medium | 5.4 | 2023-01-26 | A cross-site scripting (XSS) vulnerability in the Create Ticket page of Small CRM v3.0 allows attackers to execute arbitrary web scripts or HTML via a crafted… |