Login Request a demo
SC
Product
Small CRM
by PHPGurukul · last CVE Sep 13, 2026
20
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Vulnerabilities20In the news0Timeline
Severity mix
Critical 8High 5Medium 6Low 1
Severity
All severities20Critical8High5Medium6Low1
Exploitation
On CISA KEV0Exploited in the wild0
Watch

Add Small CRM to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2025-11053
9.8
0%
Sep 27
PHPGurukul Small CRM forgot-password.php sql injection
Affected: 4.0
CVE-2025-10664
9.8
0%
Sep 18
PHPGurukul Small CRM create-ticket.php sql injection
Affected: 4.0
CVE-2025-10114
9.8
0%
Sep 9
PHPGurukul Small CRM profile.php sql injection
Affected: 4.0
CVE-2025-10079
9.8
0%
Sep 8
PHPGurukul Small CRM get-quote.php sql injection
Affected: 4.0
CVE-2024-13001
9.8
0%
Dec 29
PHPGurukul Small CRM index.php sql injection
Affected: 1.0
CVE-2024-13000
9.8
1%
Dec 29
PHPGurukul Small CRM quote-details.php sql injection
Affected: 1.0
CVE-2024-12999
9.8
1%
Dec 29
PHPGurukul Small CRM edit-user.php sql injection
Affected: 1.0
CVE-2024-3691
9.8
1%
Apr 12
A vulnerability, which was classified as critical, has been found in PHPGurukul Small CRM 3.0
Affected: 3.0
CVE-2025-15390
8.8
0%
Dec 31
PHPGurukul Small CRM edit-user.php authorization
Affected: 4.0
CVE-2024-3690
8.8
1%
Apr 12
A vulnerability classified as critical was found in PHPGurukul Small CRM 3.0
Affected: 3.0
CVE-2025-5227
7.3
0%
May 27
PHPGurukul Small CRM manage-tickets.php sql injection
Affected: 3.0
CVE-2025-5226
7.3
0%
May 27
PHPGurukul Small CRM change-password.php sql injection
Affected: 3.0
CVE-2025-50484
7.1
0%
Jul 28
Improper session invalidation in the component /crm/change-password.php of PHPGurukul Small CRM v3.0 allows attackers to execute a session hijacking attack
Affected: 3.0
CVE-2024-44648
6.5
0%
Nov 17
PHPGurukul Small CRM 3.0 is vulnerable to SQL Injection via id and adminremark parameters in quote-details.php
Affected: 3.0
CVE-2024-44641
6.5
0%
Nov 17
PHPGurukul Small CRM 3.0 is vulnerable to SQL Injection via the oldpass parameter in change-password.php
Affected: 3.0
CVE-2024-44644
6.5
0%
Nov 17
PHPGurukul Small CRM 3.0 is vulnerable to SQL Injection via the frm_id and aremark parameters in manage-tickets.php
Affected: 3.0
CVE-2024-44647
6.1
0%
Nov 17
PHPGurukul Small CRM 3.0 is vulnerable to Cross Site Scripting (XSS) via the aremark parameter in manage-tickets.php
Affected: 3.0
CVE-2025-9834
5.4
0%
Sep 2
PHPGurukul Small CRM registration.php cross site scripting
Affected: 4.0
CVE-2024-48170
5.4
0%
Feb 10
PHPGurukul Small CRM 3.0 is vulnerable to Cross Site Scripting (XSS) via a crafted payload injected into the name in the profile.php
Affected: 3.0
CVE-2026-90575
3.7
0%
Sep 13
PHPGurukul Small CRM Login Success login.php unserialize deserialization
Affected: 4.0
Showing 20