PT-2025-47163 · Phpgurukul · Phpgurukul Small Crm

Published 2025-11-17 · Updated 2025-11-17 · CVE-2024-44647

Positive Technologies (AI Summary)

CVSS v3.1

6.1

Medium

Base vector

AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

Name of the Vulnerable Software and Affected Versions PHPGurukul Small CRM version 3.0

Description PHPGurukul Small CRM version 3.0 is susceptible to Cross Site Scripting (XSS). The issue is located in the aremark parameter of the ‘manage-tickets.php’ file. Exploitation occurs through manipulation of this parameter, potentially allowing attackers to inject malicious scripts.

Recommendations Update to a newer version that contains a fix for this vulnerability. As a temporary workaround, sanitize the aremark parameter in the ‘manage-tickets.php’ file to prevent the execution of malicious scripts.

Exploit

Fix

XSS

Weakness Enumeration

CWE-79

Related Identifiers

CVE-2024-44647

Affected Products

Phpgurukul Small Crm

References · 7

• 🔥 https://github.com/leexsoyoung/CVEs/blob/main/CVE-2024-44647.md · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2024-44647 · Security Note
• https://osv.dev/vulnerability/CVE-2024-44647 · Vendor Advisory
• https://twitter.com/CVEnew/status/1990462685608104118 · Twitter Post
• https://twitter.com/VulmonFeeds/status/1990554514709950651 · Twitter Post
• https://phpgurukul.com/small-crm-php · Note
• https://t.me/CVEtracker/37507 · Telegram Post