Small Crm

Vendor:

First CVE: Apr 12, 2024 · Active for 2 years

19
Total CVEs
More Total CVEs than 95% of tracked products
9.5
Avg CVEs / Year
Higher CVE frequency than 96% of tracked products
8.1
Avg CVSS
Higher Avg CVSS than 73% of tracked products
0.0%
KEV Rate
Bottom 1%

Trends Over Time

The number and severity of CVEs published that impact Small Crm over time

Volume of CVEsAvg CVSS Base Score
First CVE
Apr 12, 2024
2 years ago
Most Recent CVE
Dec 31, 2025
209 days ago

CVE Severity & Scoring

Small Crm19 CVEs
All CVEs353,173 CVEs
MediumHighCritical
Attack Vector
Local0 (0.0%)
Network19 (100.0%)
Unknown0 (0.0%)
Physical0 (0.0%)
Adjacent Network0 (0.0%)
Attack Complexity
Low19 (100.0%)
High0 (0.0%)
Unknown0 (0.0%)
User Interaction
None15 (78.9%)
Unknown0 (0.0%)
Required4 (21.1%)
Privileges Required
Low4 (21.1%)
High0 (0.0%)
None15 (78.9%)
Unknown0 (0.0%)

Top CVEs

Signals from CVEs in this product scope (19 CVEs).

19 CVEs · Highest risk first

CVEPublishedCVSSRiskKEVExploit
CVE-2025-11053CRITICAL
A weakness has been identified in PHPGurukul Small CRM 4.0. This affects an unknown function of the file /forgot-password.php. Executing manipulation of the argument email can lead
Sep 27, 20259.831NONO
CVE-2025-10664CRITICAL
A vulnerability was determined in PHPGurukul Small CRM 4.0. This impacts an unknown function of the file /create-ticket.php. Executing manipulation of the argument subject can lead
Sep 18, 20259.831NONO
CVE-2025-10114CRITICAL
A vulnerability was found in PHPGurukul Small CRM 4.0. Affected by this issue is some unknown functionality of the file /profile.php. The manipulation of the argument Name results
Sep 9, 20259.831NONO
CVE-2025-10079CRITICAL
A flaw has been found in PHPGurukul Small CRM 4.0. Affected by this vulnerability is an unknown functionality of the file /get-quote.php. Executing manipulation of the argument Con
Sep 8, 20259.830NONO
CVE-2025-15390HIGH
A security flaw has been discovered in PHPGurukul Small CRM 4.0. This impacts an unknown function of the file /admin/edit-user.php. The manipulation results in missing authorizatio
Dec 31, 20258.829NONO
CVE-2024-13001CRITICAL
A vulnerability was found in PHPGurukul Small CRM 1.0. It has been classified as critical. Affected is an unknown function of the file /admin/index.php. The manipulation of the arg
Dec 29, 20249.829NONO
CVE-2024-13000CRITICAL
A vulnerability was found in PHPGurukul Small CRM 1.0 and classified as critical. This issue affects some unknown processing of the file /admin/quote-details.php. The manipulation
Dec 29, 20249.829NONO
CVE-2024-12999CRITICAL
A vulnerability has been found in PHPGurukul Small CRM 1.0 and classified as critical. This vulnerability affects unknown code of the file /admin/edit-user.php. The manipulation of
Dec 29, 20249.826NONO
CVE-2024-3691CRITICAL
A vulnerability, which was classified as critical, has been found in PHPGurukul Small CRM 3.0. Affected by this issue is some unknown functionality of the component Registration Pa
Apr 12, 20249.826NONO
CVE-2025-50484HIGH
Improper session invalidation in the component /crm/change-password.php of PHPGurukul Small CRM v3.0 allows attackers to execute a session hijacking attack.
Jul 28, 20257.125NONO
View all 19 CVEs →

Exploit Exposure

Signals from CVEs in this product scope (19 CVEs).

CISA KEV
0 CVEs
0.0% of CVEs· Bottom 1%
Metasploit
0 CVEs
0.0% of CVEs· Bottom 1%
Nuclei
0 CVEs
0.0% of CVEs· Bottom 1%
ExploitDB
0 CVEs
0.0% of CVEs· Bottom 1%

Social Chatter

Signals from CVEs in this product scope (19 CVEs).

Media Mentions

Signals from CVEs in this product scope (19 CVEs).

Top CNAs Publishing CVEs For Small Crm

Top CWEs

Versions

VersionCVE CountAvg CVSSAvg EPSSKEVExploits
4.058.90.4%00
3.0107.10.4%00
1.039.80.5%00