EUVD-2026-72075

A vulnerability was detected in DefaultFuction CRM 1.0.0. This impacts an unknown function of the file /modules/customers/delete.php. Performing a manipulation of the argument ID results in sql injection. It is possible to initiate the attack remotely. The exploit is now public and may be used...

CVE-2026-86172 DefaultFuction CRM delete.php sql injection

A vulnerability was detected in DefaultFuction CRM 1.0.0. This impacts an unknown function of the file /modules/customers/delete.php. Performing a manipulation of the argument ID results in sql injection. It is possible to initiate the attack remotely. The exploit is now public and may be used...

CVE-2026-86171

A security vulnerability has been detected in DefaultFuction CRM 1.0.0. This affects an unknown function of the file /modules/orders/delete.php. Such manipulation of the argument ID leads to sql injection. The attack may be performed from remote. The exploit has been disclosed publicly and may be...

CVE-2026-86171 DefaultFuction CRM delete.php sql injection

A security vulnerability has been detected in DefaultFuction CRM 1.0.0. This affects an unknown function of the file /modules/orders/delete.php. Such manipulation of the argument ID leads to sql injection. The attack may be performed from remote. The exploit has been disclosed publicly and may be...

EUVD-2026-72067

A security vulnerability has been detected in DefaultFuction CRM 1.0.0. This affects an unknown function of the file /modules/orders/delete.php. Such manipulation of the argument ID leads to sql injection. The attack may be performed from remote. The exploit has been disclosed publicly and may be...

CVE-2026-86171 DefaultFuction CRM delete.php sql injection

A security vulnerability has been detected in DefaultFuction CRM 1.0.0. This affects an unknown function of the file /modules/orders/delete.php. Such manipulation of the argument ID leads to sql injection. The attack may be performed from remote. The exploit has been disclosed publicly and may be...

CVE-2026-86171 DefaultFuction CRM delete.php sql injection

A security vulnerability has been detected in DefaultFuction CRM 1.0.0. This affects an unknown function of the file /modules/orders/delete.php. Such manipulation of the argument ID leads to sql injection. The attack may be performed from remote. The exploit has been disclosed publicly and may be...

CVE-2026-86171

DefaultFuction CRM 1.0.0 is affected by a SQL injection vulnerability in the file /modules/orders/delete.php, triggered by manipulation of the ID argument. The attack is remotely exploitable over the network with low privileges required and no user interaction. The exploit has been publicly discl...

CVE-2026-86170 DefaultFuction CRM edit.php sql injection

A weakness has been identified in DefaultFuction CRM 1.0.0. The impacted element is an unknown function of the file /modules/orders/edit.php. This manipulation of the argument ID causes sql injection. The attack is possible to be carried out remotely. The exploit has been made available to the...

CVE-2026-86170 DefaultFuction CRM edit.php sql injection

A weakness has been identified in DefaultFuction CRM 1.0.0. The impacted element is an unknown function of the file /modules/orders/edit.php. This manipulation of the argument ID causes sql injection. The attack is possible to be carried out remotely. The exploit has been made available to the...

EUVD-2026-72059

A weakness has been identified in DefaultFuction CRM 1.0.0. The impacted element is an unknown function of the file /modules/orders/edit.php. This manipulation of the argument ID causes sql injection. The attack is possible to be carried out remotely. The exploit has been made available to the...

CVE-2026-86170 DefaultFuction CRM edit.php sql injection

A weakness has been identified in DefaultFuction CRM 1.0.0. The impacted element is an unknown function of the file /modules/orders/edit.php. This manipulation of the argument ID causes sql injection. The attack is possible to be carried out remotely. The exploit has been made available to the...

CVE-2026-86170

A SQL injection vulnerability exists in DefaultFuction CRM 1.0.0 , specifically in the file /modules/orders/edit.php. The ID parameter is unsafely manipulated, allowing a remote attacker with low privileges to execute arbitrary SQL commands without user interaction. The vulnerability carries a CV...

CVE-2026-86164

A security flaw has been discovered in itsourcecode Sales and Inventory System 1.0. Affected is an unknown function of the file /pages/transview.php. The manipulation of the argument ID results in sql injection. The attack may be performed from remote. The exploit has been released to the public...

CVE-2026-86159

A flaw has been found in SourceCodester Online Voting System 1.0. Impacted is an unknown function of the file /ajax.php?action=saveuser. This manipulation of the argument ID causes sql injection. The attack may be initiated remotely. The exploit has been published and may be used...

CVE-2026-86160

A vulnerability has been found in SourceCodester Online Voting System 1.0. The affected element is an unknown function of the file /ajax.php?action=deletevoting. Such manipulation of the argument ID leads to sql injection. The attack may be launched remotely. The exploit has been disclosed to the...

EUVD-2026-72048

A security flaw has been discovered in itsourcecode Sales and Inventory System 1.0. Affected is an unknown function of the file /pages/transview.php. The manipulation of the argument ID results in sql injection. The attack may be performed from remote. The exploit has been released to the public...

CVE-2026-86164

itsourcecode Sales and Inventory System 1.0 contains a SQL injection vulnerability in the file /pages/trans_view.php, triggered by manipulation of the ID argument. The attack can be performed remotely with low privileges required and no user interaction (CVSS 3.1: 6.3 MEDIUM ). The exploit has be...

CVE-2026-86164 itsourcecode Sales and Inventory System trans_view.php sql injection

A security flaw has been discovered in itsourcecode Sales and Inventory System 1.0. Affected is an unknown function of the file /pages/transview.php. The manipulation of the argument ID results in sql injection. The attack may be performed from remote. The exploit has been released to the public...

CVE-2026-86164 itsourcecode Sales and Inventory System trans_view.php sql injection

A security flaw has been discovered in itsourcecode Sales and Inventory System 1.0. Affected is an unknown function of the file /pages/transview.php. The manipulation of the argument ID results in sql injection. The attack may be performed from remote. The exploit has been released to the public...