CVE-2023-24655

CRITICAL 9.8CVE-2023-24655 · Published 23/03/2023 · updated 17/06/2026

In short

CVE-2023-24655 is a CRITICAL (CVSS 9.8) vulnerability affecting simple customer relationship management system (oretnom23).
Chance of exploitation in the next 30 days (EPSS): 1.0%, higher than 63.5% of all vulnerabilities.
No patched version is listed yet: follow the vendor's advisory in References.

Package	Affected versions	Patched versions
simple customer relationship management system oretnom23	`= 1.0`	No fix yet

Description

Simple Customer Relationship Management System v1.0 was discovered to contain a SQL injection vulnerability via the name parameter under the Profile Update function.

References

gist.github.com/y0gesh-verma/a9e83220f268f0294a611b82cf266739 · Exploit
y0gesh-verma/CVE · Exploit
sourcecodester.com/php/15895/simple-customer-relationship-management-crm-system-using-php-free-source-coude.html · Product

More vulnerabilities in simple customer relationship management system

See all →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free

Package

Affected versions

Patched versions

simple customer relationship management system

oretnom23

= 1.0

No fix yet

More vulnerabilities in simple customer relationship management system

See all →