Small crm

This hub aggregates every CVE we track for Small crm, a product in the enterprise software space. Use it to gauge the current risk picture and drill into individual advisories.

Severity distribution

Monthly trend

The 15 most recently published vulnerabilities affecting Small crm.

• CVE-2026-90575PHPGurukul Small CRM Login Success login.php unserialize deserialization3.7Sep 13, 2026
• CVE-2025-15390PHPGurukul Small CRM edit-user.php authorization6.3Dec 31, 2025
• CVE-2024-44648PHPGurukul Small CRM 3.0 is vulnerable to SQL Injection via id and adminremark parameters in quote-details.php.6.5Nov 17, 2025
• CVE-2024-44644PHPGurukul Small CRM 3.0 is vulnerable to SQL Injection via the frm_id and aremark parameters in manage-tickets.php.6.5Nov 17, 2025
• CVE-2024-44641PHPGurukul Small CRM 3.0 is vulnerable to SQL Injection via the oldpass parameter in change-password.php.6.5Nov 17, 2025
• CVE-2024-44647PHPGurukul Small CRM 3.0 is vulnerable to Cross Site Scripting (XSS) via the aremark parameter in manage-tickets.php.6.1Nov 17, 2025
• CVE-2025-11053PHPGurukul Small CRM forgot-password.php sql injection7.3Sep 27, 2025
• CVE-2025-10664PHPGurukul Small CRM create-ticket.php sql injection7.3Sep 18, 2025
• CVE-2025-10114PHPGurukul Small CRM profile.php sql injection7.3Sep 9, 2025
• CVE-2025-10079PHPGurukul Small CRM get-quote.php sql injection7.3Sep 8, 2025
• CVE-2025-9834PHPGurukul Small CRM registration.php cross site scripting3.5Sep 2, 2025
• CVE-2025-50484Improper session invalidation in the component /crm/change-password.php of PHPGurukul Small CRM v3.0 allows attackers to execute a session hijacking attack.7.1Jul 28, 2025
• CVE-2025-5227PHPGurukul Small CRM manage-tickets.php sql injection7.3May 27, 2025
• CVE-2025-5226PHPGurukul Small CRM change-password.php sql injection7.3May 27, 2025
• CVE-2024-48170PHPGurukul Small CRM 3.0 is vulnerable to Cross Site Scripting (XSS) via a crafted payload injected into the name in the profile.php.5.4Feb 10, 2025