Login Request a demo
SC
Product
Small CRM
by PHPGurukul · last CVE Sep 13, 2026
20
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Vulnerabilities20In the news0Timeline
Severity mix
Critical 8High 5Medium 6Low 1
Severity
All severities20Critical8High5Medium6Low1
Exploitation
On CISA KEV0Exploited in the wild0
Watch

Add Small CRM to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2024-44648
6.5
0%
Nov 17
PHPGurukul Small CRM 3.0 is vulnerable to SQL Injection via id and adminremark parameters in quote-details.php
Affected: 3.0
CVE-2024-44641
6.5
0%
Nov 17
PHPGurukul Small CRM 3.0 is vulnerable to SQL Injection via the oldpass parameter in change-password.php
Affected: 3.0
CVE-2024-44644
6.5
0%
Nov 17
PHPGurukul Small CRM 3.0 is vulnerable to SQL Injection via the frm_id and aremark parameters in manage-tickets.php
Affected: 3.0
CVE-2024-44647
6.1
0%
Nov 17
PHPGurukul Small CRM 3.0 is vulnerable to Cross Site Scripting (XSS) via the aremark parameter in manage-tickets.php
Affected: 3.0
CVE-2025-9834
5.4
0%
Sep 2
PHPGurukul Small CRM registration.php cross site scripting
Affected: 4.0
CVE-2024-48170
5.4
0%
Feb 10
PHPGurukul Small CRM 3.0 is vulnerable to Cross Site Scripting (XSS) via a crafted payload injected into the name in the profile.php
Affected: 3.0
Showing 6