CVE-2025-10664: PHPGurukul Small CRM create-ticket.php sql injection
Published Sep 18, 2025
·Updated
A vulnerability was determined in PHPGurukul Small CRM 4.0. This impacts an unknown function of the file /create-ticket.php. Executing manipulation of the argument subject can lead to sql injection. The attack may be launched remotely. The exploit has been publicly disclosed and may be utilized.
Affected Software
2 affected components
Phpgurukul Small CRM
Phpgurukul Small CRM=4.0
Event History
Sep 18, 2025
CVE Published
via MITRE·12:02 PM
Data Sourced
via MITRE·12:02 PM
DescriptionSeverityWeakness
Data Sourced
via NVD·12:15 PM
DescriptionSeverityWeaknessAffected Software
Frequently Asked Questions
1
What is the severity of CVE-2025-10664?
CVE-2025-10664 is classified as a high severity vulnerability due to its potential for remote SQL injection.
2
How do I fix CVE-2025-10664?
To fix CVE-2025-10664, ensure proper input validation and sanitization on the subject argument in the /create-ticket.php file.
3
What systems are affected by CVE-2025-10664?
CVE-2025-10664 affects PHPGurukul Small CRM version 4.0.
4
Can CVE-2025-10664 be exploited remotely?
Yes, CVE-2025-10664 can be exploited remotely by attackers.
5
What type of attack is associated with CVE-2025-10664?
CVE-2025-10664 is associated with SQL injection attacks that can compromise database security.