Skip to content
OpenAdvisories

Vendor

DefaultFuction

8 known vulnerabilities.

Products

CRM 3 Jeson Customer Relationship Management System 2 Notice-System-Managent 1 Customer-Relationship-Management-In-C-Project 1 Content-Management-System 1
All Critical High Medium Low Exploited only Public exploit

6 results · Clear filters · Feed

  • Medium 6.3
    CVE-2026-86172

    DefaultFuction CRM delete.php sql injection

    A vulnerability was detected in DefaultFuction CRM 1.0.0. This impacts an unknown function of the file /modules/customers/delete.php. Performing a manipulation of the argument ID results in sql injection. It is possible to initiate the attack remotely. The ex…

    DefaultFuction CRM
  • Medium 6.3
    CVE-2026-86171

    DefaultFuction CRM delete.php sql injection

    A security vulnerability has been detected in DefaultFuction CRM 1.0.0. This affects an unknown function of the file /modules/orders/delete.php. Such manipulation of the argument ID leads to sql injection. The attack may be performed from remote. The exploit …

    DefaultFuction CRM
  • Medium 6.3
    CVE-2026-86170

    DefaultFuction CRM edit.php sql injection

    A weakness has been identified in DefaultFuction CRM 1.0.0. The impacted element is an unknown function of the file /modules/orders/edit.php. This manipulation of the argument ID causes sql injection. The attack is possible to be carried out remotely. The exp…

    DefaultFuction CRM
  • Medium 6.3
    CVE-2026-19933

    DefaultFuction Customer-Relationship-Management-In-C-Project Customer Search gets stack-based overflow

    A weakness has been identified in DefaultFuction Customer-Relationship-Management-In-C-Project 2.0. Impacted is the function gets of the component Customer Search Module. This manipulation causes stack-based buffer overflow. The attack may be initiated remote…

    DefaultFuction Customer-Relationship-Management-In-C-Project
  • Medium 6.3
    CVE-2026-19932

    DefaultFuction Notice-System-Managent NoticeController execute GroovyShell.evaluate code injection

    A security flaw has been discovered in DefaultFuction Notice-System-Managent 2.0. This issue affects the function GroovyShell.evaluate of the file /execute of the component NoticeController. The manipulation results in code injection. The attack can be launch…

    DefaultFuction Notice-System-Managent
  • Medium 6.3
    CVE-2026-3616

    DefaultFuction Jeson Customer Relationship Management System edit.php sql injection

    A vulnerability was detected in DefaultFuction Jeson Customer Relationship Management System 1.0.0. Impacted is an unknown function of the file /modules/customers/edit.php. Performing a manipulation of the argument ID results in sql injection. The attack may …

    DefaultFuction Jeson Customer Relationship Management System