# Phpgurukul Small-Crm vulnerabilities Source: https://junglewise.ai/threats/technologies/small-crm Publisher: Junglewise Threat Intelligence, https://junglewise.ai/threats Updated: 10 November 2026, 03:07 UTC. Rebuilt every hour. Data: https://junglewise.ai/threats/technologies/small-crm.json License: CC BY 4.0 with a link back Junglewise Threat Intelligence has tracked 6 vulnerabilities in Phpgurukul Small-Crm: 0 in the last 7 days and 1 in the last 90 days, 0 of them critical and 0 exploited in the wild. The most recent, CVE-2026-90575, was published on 13 September 2026. Nothing was published in the last eight weeks. ## Counts - Last 7 days: 0 - Last 30 days: 0 - Last 90 days: 1 - All time: 6 (0 critical, 0 exploited in the wild) ## About Phpgurukul Small-Crm A customer relationship management application for tracking client interactions and sales leads. ## Latest Phpgurukul Small-Crm vulnerabilities - [CVE-2026-90575: PHPGurukul Small CRM insecure deserialization in login handler](https://junglewise.ai/threats/cve-2026-90575-phpgurukul-small-crm-insecure-deserialization-in-login-handler) (low, CVSS 3.7, published 13 Sep 2026) - [CVE-2024-44648: PHPGurukul Small CRM 3.0 is vulnerable to SQL Injection via id and adminremark parameters in quote-details.php.](https://junglewise.ai/threats/cve-2024-44648-phpgurukul-small-crm-3-0-is-vulnerable-to-sql-injection-via-id) (medium, CVSS 6.5, published 17 Nov 2025) - [CVE-2024-44647: PHPGurukul Small CRM 3.0 is vulnerable to Cross Site Scripting (XSS) via the aremark parameter in manage-tickets.php.](https://junglewise.ai/threats/cve-2024-44647-phpgurukul-small-crm-3-0-is-vulnerable-to-cross-site-scripting) (medium, CVSS 6.1, published 17 Nov 2025) - [CVE-2024-44644: PHPGurukul Small CRM 3.0 is vulnerable to SQL Injection via the frm_id and aremark parameters in manage-tickets.php.](https://junglewise.ai/threats/cve-2024-44644-phpgurukul-small-crm-3-0-is-vulnerable-to-sql-injection-via-the) (medium, CVSS 6.5, published 17 Nov 2025) - [CVE-2024-44641: PHPGurukul Small CRM 3.0 is vulnerable to SQL Injection via the oldpass parameter in change-password.php.](https://junglewise.ai/threats/cve-2024-44641-phpgurukul-small-crm-3-0-is-vulnerable-to-sql-injection-via-the) (medium, CVSS 6.5, published 17 Nov 2025) - [CVE-2025-50484: PHPGurukul Small CRM session hijacking in change-password.php](https://junglewise.ai/threats/cve-2025-50484-phpgurukul-small-crm-session-hijacking-in-change-password-php) (high, CVSS 7.1, published 28 Jul 2025) ## Most severe Phpgurukul Small-Crm vulnerabilities - [CVE-2025-50484: PHPGurukul Small CRM session hijacking in change-password.php](https://junglewise.ai/threats/cve-2025-50484-phpgurukul-small-crm-session-hijacking-in-change-password-php) (high, CVSS 7.1, published 28 Jul 2025) - [CVE-2024-44648: PHPGurukul Small CRM 3.0 is vulnerable to SQL Injection via id and adminremark parameters in quote-details.php.](https://junglewise.ai/threats/cve-2024-44648-phpgurukul-small-crm-3-0-is-vulnerable-to-sql-injection-via-id) (medium, CVSS 6.5, published 17 Nov 2025) - [CVE-2024-44644: PHPGurukul Small CRM 3.0 is vulnerable to SQL Injection via the frm_id and aremark parameters in manage-tickets.php.](https://junglewise.ai/threats/cve-2024-44644-phpgurukul-small-crm-3-0-is-vulnerable-to-sql-injection-via-the) (medium, CVSS 6.5, published 17 Nov 2025) - [CVE-2024-44641: PHPGurukul Small CRM 3.0 is vulnerable to SQL Injection via the oldpass parameter in change-password.php.](https://junglewise.ai/threats/cve-2024-44641-phpgurukul-small-crm-3-0-is-vulnerable-to-sql-injection-via-the) (medium, CVSS 6.5, published 17 Nov 2025) - [CVE-2024-44647: PHPGurukul Small CRM 3.0 is vulnerable to Cross Site Scripting (XSS) via the aremark parameter in manage-tickets.php.](https://junglewise.ai/threats/cve-2024-44647-phpgurukul-small-crm-3-0-is-vulnerable-to-cross-site-scripting) (medium, CVSS 6.1, published 17 Nov 2025) - [CVE-2026-90575: PHPGurukul Small CRM insecure deserialization in login handler](https://junglewise.ai/threats/cve-2026-90575-phpgurukul-small-crm-insecure-deserialization-in-login-handler) (low, CVSS 3.7, published 13 Sep 2026) ## Vulnerabilities per week Nothing was published in the last eight weeks. | Week of | Vulns | Critical | Exploited | | --- | --- | --- | --- | | 17 Aug 2026 | 0 | 0 | 0 | | 24 Aug 2026 | 0 | 0 | 0 | | 31 Aug 2026 | 0 | 0 | 0 | | 7 Sep 2026 | 1 | 0 | 0 | | 14 Sep 2026 | 0 | 0 | 0 | | 21 Sep 2026 | 0 | 0 | 0 | | 28 Sep 2026 | 0 | 0 | 0 | | 5 Oct 2026 | 0 | 0 | 0 | | 12 Oct 2026 | 0 | 0 | 0 | | 19 Oct 2026 | 0 | 0 | 0 | | 26 Oct 2026 | 0 | 0 | 0 | | 2 Nov 2026 | 0 | 0 | 0 | | 9 Nov 2026 | 0 | 0 | 0 | ## Other Phpgurukul technologies - [Phpgurukul Student Record System](https://junglewise.ai/threats/technologies/student-record-system): 9 vulnerabilities - [Phpgurukul Online Shopping Portal](https://junglewise.ai/threats/technologies/online-shopping-portal): 7 vulnerabilities - [Phpgurukul Online Shopping Portal Project](https://junglewise.ai/threats/technologies/online-shopping-portal-project): 7 vulnerabilities - [Phpgurukul Complaint Management System](https://junglewise.ai/threats/technologies/phpgurukul-complaint-management-system): 5 vulnerabilities - [Phpgurukul Bank Locker Management System](https://junglewise.ai/threats/technologies/bank-locker-management-system): 4 vulnerabilities - [Phpgurukul Beauty Parlour Management System](https://junglewise.ai/threats/technologies/beauty-parlour-management-system): 4 vulnerabilities - [Phpgurukul Online Course Registration](https://junglewise.ai/threats/technologies/online-course-registration): 4 vulnerabilities - [Phpgurukul Blood Donor Management System](https://junglewise.ai/threats/technologies/blood-donor-management-system): 3 vulnerabilities - [Phpgurukul Curfew E-Pass Management System](https://junglewise.ai/threats/technologies/curfew-e-pass-management-system): 3 vulnerabilities - [Phpgurukul Daily Expense Tracker System](https://junglewise.ai/threats/technologies/daily-expense-tracker-system): 3 vulnerabilities ## Sources NVD, GitHub Security Advisories, OSV, the CISA Known Exploited Vulnerabilities catalog, FIRST EPSS and vendor advisories. Rebuilt every hour. Cite as: Junglewise Threat Intelligence, "Phpgurukul Small-Crm vulnerabilities", https://junglewise.ai/threats/technologies/small-crm, 10 November 2026.