CVE-2025-15390

概要

参考情報

• rsecroot/Small-Customer-Relationship-Management-CRM-in-PHP · Exploit
• phpgurukul.com · Product
• vuldb.com · Permissions Required
• vuldb.com · Third Party Advisory
• vuldb.com · Third Party Advisory

small crm のその他の脆弱性

• CVE-2024-44648中 6.5PHPGurukul Small CRM 3.0 is vulnerable to SQL Injection via id and adminremark parameters in quote-details.php.
• CVE-2024-44647中 6.1PHPGurukul Small CRM 3.0 is vulnerable to Cross Site Scripting (XSS) via the aremark parameter in manage-tickets.php.
• CVE-2024-44644中 6.5PHPGurukul Small CRM 3.0 is vulnerable to SQL Injection via the frm_id and aremark parameters in manage-tickets.php.
• CVE-2024-44641中 6.5PHPGurukul Small CRM 3.0 is vulnerable to SQL Injection via the oldpass parameter in change-password.php.
• CVE-2025-11053緊急 9.8A weakness has been identified in PHPGurukul Small CRM 4.0. This affects an unknown function of the file /forgot-password.php. Executing man…