Home

Description

PHPGurukul Small CRM 3.0 is vulnerable to SQL Injection via the oldpass parameter in change-password.php.

PUBLISHED Reserved 2024-08-21 | Published 2025-11-17 | Updated 2025-11-17 | Assigner mitre

References

phpgurukul.com/small-crm-php/

github.com/leexsoyoung/CVEs/blob/main/CVE-2024-44641.md

cve.org (CVE-2024-44641)

nvd.nist.gov (CVE-2024-44641)

Download JSON