VULNERABILITY INTELLIGENCE

CVE-2023-50035

CVSS score9.8 CRITICAL

EPSS probability0.63%

CISA KEVNot currently listed

Published2023-12-29

Last modified2026-06-17

Description

PHPGurukul Small CRM 3.0 is vulnerable to SQL Injection on the Users login panel because of "password" parameter is directly used in the SQL query without any sanitization and the SQL Injection payload being executed.