DefaultFuction

Records8All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical0CVSS 9.0–10.0

CVSS high0CVSS 7.0–8.9

Exploited now

DefaultFuction records in CISA KEV

No DefaultFuction vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Content Management System 1 record HIGH

Records

8 records

TI-2026-04665 CVE-2026-5333 · GHSA-p458-m7mj-jhv3

DefaultFuction Content-Management-System tools.php command injection

HIGH 70

A security flaw has been discovered in DefaultFuction Content-Management-System 1.0.

CVSS 4.0MEDIUM 6.9 Network No auth No interaction EPSS 0.02982 Published 2026-04-02 No fix listed CWE-74

TI-2026-04025 CVE-2026-4623 · GHSA-qmvm-wg96-h753

DefaultFuction Jeson-Customer-Relationship-Management-System API Module System.php server-side request forgery

HIGH 70

A security vulnerability has been detected in DefaultFuction Jeson-Customer-Relationship-Management-System up to 1b4679c4d06b90d31dd521c2b000bfdec5a36e00.

CVSS 4.0MEDIUM 6.9 Network No auth No interaction EPSS 0.00327 Published 2026-03-24 No fix listed CWE-918

TI-2026-58961 CVE-2026-86172 · GHSA-hwrx-f5x3-47mw

DefaultFuction CRM delete.php sql injection

MEDIUM 57

A vulnerability was detected in DefaultFuction CRM 1.0.0.

CVSS 4.0MEDIUM 5.3 Network Low privileges No interaction EPSS 0.00316 Published 2026-09-06 No fix listed CWE-74

TI-2026-58960 CVE-2026-86171 · GHSA-pcc8-7q79-f457

DefaultFuction CRM delete.php sql injection

MEDIUM 57

A security vulnerability has been detected in DefaultFuction CRM 1.0.0.

CVSS 4.0MEDIUM 5.3 Network Low privileges No interaction EPSS 0.00316 Published 2026-09-06 No fix listed CWE-74

TI-2026-58959 CVE-2026-86170 · GHSA-vpg3-44vc-j965

DefaultFuction CRM edit.php sql injection

MEDIUM 57

A weakness has been identified in DefaultFuction CRM 1.0.0.

CVSS 4.0MEDIUM 5.3 Network Low privileges No interaction EPSS 0.00316 Published 2026-09-06 No fix listed CWE-74

TI-2026-16163 CVE-2026-19932 · GHSA-fxrg-9hfp-v3x8

DefaultFuction Notice-System-Managent NoticeController execute GroovyShell.evaluate code injection

MEDIUM 57

A security flaw has been discovered in DefaultFuction Notice-System-Managent 2.0.

CVSS 4.0MEDIUM 5.3 Network Low privileges No interaction EPSS 0.00413 Published 2026-08-16 No fix listed CWE-74

TI-2026-03119 CVE-2026-3616 · GHSA-f26x-8245-j3vw

DefaultFuction Jeson Customer Relationship Management System edit.php sql injection

MEDIUM 57

A vulnerability was detected in DefaultFuction Jeson Customer Relationship Management System 1.0.0.

CVSS 4.0MEDIUM 5.3 Network Low privileges No interaction EPSS 0.00234 Published 2026-03-06 No fix listed CWE-74

TI-2026-16164 CVE-2026-19933 · GHSA-w5gq-mqrx-5j28

DefaultFuction Customer-Relationship-Management-In-C-Project Customer Search gets stack-based overflow

LOW 24

A weakness has been identified in DefaultFuction Customer-Relationship-Management-In-C-Project 2.0.

CVSS 4.0MEDIUM 5.3 Network Low privileges No interaction EPSS 0.00431 Published 2026-08-16 No fix listed CWE-119

Open these records in search →

Critical	0
High	0
Medium	8
Low	0
No CVSS	0