PT-2020-18488 · Phpgurukul · Phpgurukul Small Crm

Published 2020-01-08 · Updated 2023-03-01 · CVE-2020-5511

Positive Technologies (AI Summary)

CVSS v3.1

8.8

High

Base vector

AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions PHPGurukul Small CRM version 2.0

Description The issue concerns an authentication bypass via SQL injection when logging into the administrator login page. This allows unauthorized access, potentially leading to further malicious activities.

Recommendations For PHPGurukul Small CRM version 2.0, consider disabling the administrator login page until a patch is available to prevent exploitation of the SQL injection vulnerability. Restrict access to sensitive areas of the application to minimize the risk of unauthorized access.

Exploit

Fix

SQL injection

Weakness Enumeration

CWE-89

Related Identifiers

CVE-2020-5511

Affected Products

Phpgurukul Small Crm

References · 4

• 🔥 https://exploit-db.com/exploits/47874 · Exploit
• https://osv.dev/vulnerability/CVE-2020-5511 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2020-5511 · Security Note
• https://t.me/cvenotify/45278 · Telegram Post