VYPR
← All advisories
Medium severity6.3NVD Advisory· Published Apr 12, 2024· Updated Jun 17, 2026

CVE-2024-3690

CVE-2024-3690

Description

A vulnerability classified as critical was found in PHPGurukul Small CRM 3.0. Affected by this vulnerability is an unknown functionality of the component Change Password Handler. The manipulation leads to sql injection. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. The associated identifier of this vulnerability is VDB-260479.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

3
  • Phpgurukul/Small CRM3 versions
    cpe:2.3:a:phpgurukul:small_crm:3.0:*:*:*:*:*:*:*+ 2 more
    • cpe:2.3:a:phpgurukul:small_crm:3.0:*:*:*:*:*:*:*
    • (no CPE)range: = 3.0
    • (no CPE)range: 3.0

Patches

Vulnerability mechanics

References

3

News mentions

0

No linked articles in our index yet.