| Título | PHPGurukul Small CRM 4.0 SQL Injection |
|---|
| Descripción | A critical SQL injection vulnerability exists in the email and password parameter of Small CRM v4.0, allowing unauthenticated attackers to bypass authentication via crafted payloads (e.g., ' OR 1585=1585--). Successful exploitation grants full access to the CRM dashboard and underlying database. |
|---|
| Fuente | ⚠️ https://github.com/Ant1sec-ops/Small-CRM-SQL-Injection/blob/main/Exploit.md |
|---|
| Usuario | Subhash Paudel (UID 66830) |
|---|
| Sumisión | 2025-05-31 08:47 (hace 1 Año) |
|---|
| Moderación | 2025-06-04 12:11 (4 days later) |
|---|
| Estado | Duplicado |
|---|
| Entrada de VulDB | 148416 [PHPGurukul Small CRM 2.0 Administrator Login Page inyección SQL] |
|---|
| Puntos | 0 |
|---|