| शीर्षक | PHPGurukul Small CRM in PHP 4 SQL Injection |
|---|
| विवरण | During a security assessment of the *Small CRM in PHP*, a critical SQL injection vulnerability was identified in the /crm/admin/index.php file. The flaw arises from insufficient validation of the email parameter, which is directly inserted into SQL statement. Exploitation of this flaw allows unauthenticated attackers to inject arbitrary SQL statements, gain access to sensitive data, escalate privileges, and potentially gain control of the application environment. Immediate remediation is strongly advised to mitigate the risk of exploitation. |
|---|
| स्रोत | ⚠️ https://github.com/YoSheep/cve/blob/main/PHPGurukul%20Small%20CRM%20in%20PHP%20V4.0%20crmadminindex.php%20SQL%20Injection.md |
|---|
| उपयोगकर्ता | YoSheep (UID 88465) |
|---|
| सबमिशन | 26/08/2025 05:16 PM (1 वर्ष पहले) |
|---|
| संयम | 02/09/2025 02:30 PM (7 days later) |
|---|
| स्थिति | प्रतिलिपि |
|---|
| VulDB प्रविष्टि | 289662 [PHPGurukul Small CRM 1.0 /admin/index.php email SQL इंजेक्शन] |
|---|
| अंक | 0 |
|---|