First day on Intigriti: our agent harness found and proved a remote code execution bug, paid €3,000.

CVE-2020-5511

HighCVSS 8.8/10Last modified Jun 17, 2026

Description

PHPGurukul Small CRM v2.0 was found vulnerable to authentication bypass via SQL injection when logging into the administrator login page.

Metrics

CVSS 3.1 8.8/10CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Weakness enumeration

Affected software

Vendor	Product	Versions
n/a	n/a	n/a

References

https://www.exploit-db.com/exploits/47874Exploit, Third Party Advisory, VDB Entry
https://www.exploit-db.com/exploits/47874Exploit, Third Party Advisory, VDB Entry

Timeline

Published: Jan 8, 2020
Last modified: Jun 17, 2026
NVD status: Modified

Related CVEs from 2020

CVE-2020-55126.8Gila CMS 1.11.8 allows /admin/media?path=../ Path Traversal.CVE-2020-55136.8Gila CMS 1.11.8 allows /cm/delete?t=../ Directory Traversal.CVE-2020-55149.1Gila CMS 1.11.8 allows Unrestricted Upload of a File with a Dangerous Type via .phar or .phtml to the lzld/thumb?src= URI.CVE-2020-55157.2Gila CMS 1.11.8 allows /admin/sql?query= SQL Injection.CVE-2020-55176.5CSRF in the /login URI in BlueOnyx 5209R allows an attacker to access the dashboard and perform scraping or other analysis.CVE-2020-55199.8The WebAdmin Console in OpenLiteSpeed before v1.6.5 does not strictly check request URLs, as demonstrated by the "Server Configuration > Ext CVE-2020-55207.4The netprint App for iOS 3.2.3 and earlier does not verify X.509 certificates from servers, which allows man-in-the-middle attackers to spoo CVE-2020-55217.4The kantan netprint App for iOS 2.0.2 and earlier does not verify X.509 certificates from servers, which allows man-in-the-middle attackers CVE-2020-55227.4The kantan netprint App for Android 2.0.3 and earlier does not verify X.509 certificates from servers, which allows man-in-the-middle attack CVE-2020-55237.4Android App 'MyPallete' and some of the Android banking applications based on 'MyPallete' do not verify X.509 certificates from servers, and CVE-2020-55248.8Aterm series (Aterm WF1200C firmware Ver1.2.1 and earlier, Aterm WG1200CR firmware Ver1.2.1 and earlier, Aterm WG2600HS firmware Ver1.3.2 an CVE-2020-55258.0Aterm series (Aterm WF1200C firmware Ver1.2.1 and earlier, Aterm WG1200CR firmware Ver1.2.1 and earlier, Aterm WG2600HS firmware Ver1.3.2 an