CVE:CVE-2020-5511
CNNVD:CNNVD-202001-261
PHPGurukul Small CRM是一套客户关系管理系统。
PHPGurukul Small CRM v2.0版本中的/index.php文件存在SQL注入漏洞。攻击者可利用该漏洞绕过身份验证。
solution:Upgrade small_crm_project small_crm to a higher version than 2.0,and avoid the version 2.0