SQL Injection Vulnerability in PHPGurukul Small CRM Software

CVE-2024-44644

What is CVE-2024-44644?

PHPGurukul Small CRM version 3.0 is compromised due to a SQL Injection vulnerability that can be exploited through the frm_id and aremark parameters in the manage-tickets.php file. This flaw allows an attacker to manipulate SQL queries, potentially leading to unauthorized access to sensitive data within the application. It is crucial for users of this CRM software to implement security measures and updates to prevent exploitation of this vulnerability.

References