Skip to content
OpenAdvisories

Product · DefaultFuction

CRM

3 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

3 results · Clear filters · Feed

  • Medium 6.3
    CVE-2026-86172

    DefaultFuction CRM delete.php sql injection

    A vulnerability was detected in DefaultFuction CRM 1.0.0. This impacts an unknown function of the file /modules/customers/delete.php. Performing a manipulation of the argument ID results in sql injection. It is possible to initiate the attack remotely. The ex…

    DefaultFuction CRM
  • Medium 6.3
    CVE-2026-86171

    DefaultFuction CRM delete.php sql injection

    A security vulnerability has been detected in DefaultFuction CRM 1.0.0. This affects an unknown function of the file /modules/orders/delete.php. Such manipulation of the argument ID leads to sql injection. The attack may be performed from remote. The exploit …

    DefaultFuction CRM
  • Medium 6.3
    CVE-2026-86170

    DefaultFuction CRM edit.php sql injection

    A weakness has been identified in DefaultFuction CRM 1.0.0. The impacted element is an unknown function of the file /modules/orders/edit.php. This manipulation of the argument ID causes sql injection. The attack is possible to be carried out remotely. The exp…

    DefaultFuction CRM