CVE-2025-11053: PHPGurukul Small CRM forgot-password.php sql injection
A weakness has been identified in PHPGurukul Small CRM 4.0. This affects an unknown function of the file /forgot-password.php. Executing manipulation of the argument email can lead to sql injection. The attack can be launched remotely. The exploit has been made available to the public and could be exploited.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2025-11053?
CVE-2025-11053 is classified as a medium severity vulnerability due to its potential for remote SQL injection.
How do I fix CVE-2025-11053?
To fix CVE-2025-11053, sanitize and validate user inputs in the /forgot-password.php file to prevent SQL injection.
What software is affected by CVE-2025-11053?
CVE-2025-11053 affects PHPGurukul Small CRM version 4.0.
Can CVE-2025-11053 be exploited remotely?
Yes, CVE-2025-11053 can be exploited remotely through manipulated email arguments.
What kind of attack is possible with CVE-2025-11053?
CVE-2025-11053 allows for SQL injection attacks, which can compromise the database.