PT-2025-47164 · Phpgurukul · Phpgurukul Small Crm

Published 2025-11-17 · Updated 2025-11-17 · CVE-2024-44648

Positive Technologies (AI Summary)

CVSS v3.1

6.5

Medium

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N

Name of the Vulnerable Software and Affected Versions PHPGurukul Small CRM version 3.0

Description PHPGurukul Small CRM version 3.0 is susceptible to SQL Injection through the id and adminremark parameters in the 'quote-details.php' file. This allows for potential unauthorized database access or modification.

Recommendations Apply necessary input validation and sanitization to the id and adminremark parameters in the 'quote-details.php' file.

Exploit

Fix

SQL injection

Weakness Enumeration

CWE-89

Related Identifiers

CVE-2024-44648

Affected Products

Phpgurukul Small Crm

References · 7

• 🔥 https://github.com/leexsoyoung/CVEs/blob/main/CVE-2024-44648.md · Exploit
• https://osv.dev/vulnerability/CVE-2024-44648 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2024-44648 · Security Note
• https://t.me/CVEtracker/37508 · Telegram Post
• https://phpgurukul.com/small-crm-php · Note
• https://twitter.com/CVEnew/status/1990462687726153903 · Twitter Post
• https://twitter.com/VulmonFeeds/status/1990551954729173182 · Twitter Post