Vulnerability Database

300,830

Total vulnerabilities in the database

CVE-2023-50035

PHPGurukul Small CRM 3.0 is vulnerable to SQL Injection on the Users login panel because of "password" parameter is directly used in the SQL query without any sanitization and the SQL Injection payload being executed.

  • Published: Dec 29, 2023
  • Updated: Jan 6, 2024
  • CVE: CVE-2023-50035
  • Severity: Critical
  • Exploit:

CVSS v3:

  • Severity: Critical
  • Score: 9.8
  • AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

CWEs:

OWASP TOP 10:

Software From Fixed in
small_crm_project / small_crm 3.0 3.0.x