| tiêu đề | PHPGurukul Small CRM in PHP 4 SQL Injection |
|---|
| Mô tả | A time-based blind SQL injection vulnerability exists in *Small CRM in PHP V4.0* within the /crm/admin/manage-tickets.php component, due to improper handling of the aremark POST parameter. The application directly concatenates unsanitized user input into SQL queries without using prepared statements, allowing remote, unauthenticated attackers to manipulate database queries. Successful exploitation can lead to unauthorized access to sensitive data, modification of database contents, and potential full compromise of the application environment, posing a severe threat to confidentiality, integrity, and availability. |
|---|
| Nguồn | ⚠️ https://github.com/YoSheep/cve/blob/main/PHPGurukul%20Small%20CRM%20in%20PHP%20V4.0%20crmadminmanage-tickets.php%20SQL%20Injectin.md |
|---|
| Người dùng | YoSheep (UID 88465) |
|---|
| Đệ trình | 27/08/2025 21:00 (cách đây 1 Năm) |
|---|
| Kiểm duyệt | 02/09/2025 14:32 (6 days later) |
|---|
| Trạng thái | Bản sao |
|---|
| Mục VulDB | 310325 [PHPGurukul Small CRM 3.0 manage-tickets.php aremark Tiêm SQL] |
|---|
| điểm | 0 |
|---|