PHPGurukul Small CRM version 3.0 contains a SQL Injection vulnerability in the manage-tickets.php script via the frm_id and aremark parameters. This flaw allows an unauthenticated attacker to inject malicious SQL code, potentially leading to unauthorized data access or modification. The vulnerability has a CVSS 3.1 base score of 6.5, indicating a medium severity level. No official patches or fixes have been provided yet, and there is no evidence of exploitation in the wild.