Lucene search
K

6 matches found

ATTACKERKB
ATTACKERKB
added 2026/03/24 1:39 a.m.4 views

CVE-2026-4623

A security vulnerability has been detected in DefaultFuction Jeson-Customer-Relationship-Management-System up to 1b4679c4d06b90d31dd521c2b000bfdec5a36e00. This affects an unknown function of the file /api/System.php of the component API Module. The manipulation of the argument url leads to...

7.5CVSS6.5AI score0.00321EPSS
Exploits0References8
CVE
CVE
added 2026/03/24 1:39 a.m.8 views

CVE-2026-4623

CVE-2026-4623 affects DefaultFuction Jeson-Customer-Relationship-Management-System up to build 1b4679c4d06b90d31dd521c2b000bfdec5a36e00. The vulnerability resides in the API Module, specifically the file /api/System.php, where manipulation of the url argument enables server-side request forgery (...

7.5CVSS6.5AI score0.00321EPSS
Exploits0References8
Vulnrichment
Vulnrichment
added 2026/03/24 1:39 a.m.3 views

CVE-2026-4623 DefaultFuction Jeson-Customer-Relationship-Management-System API Module System.php server-side request forgery

A security vulnerability has been detected in DefaultFuction Jeson-Customer-Relationship-Management-System up to 1b4679c4d06b90d31dd521c2b000bfdec5a36e00. This affects an unknown function of the file /api/System.php of the component API Module. The manipulation of the argument url leads to...

7.5CVSS6.5AI score0.00321EPSS
Exploits0References8
Positive Technologies
Positive Technologies
added 2026/03/24 12:0 a.m.5 views

PT-2026-27304

Name of the Vulnerable Software and Affected Versions DefaultFuction Jeson-Customer-Relationship-Management-System affected versions not specified Description A security issue has been identified in the API Module component of DefaultFuction Jeson-Customer-Relationship-Management-System...

7.5CVSS6.8AI score0.00321EPSS
Exploits0References11
ATTACKERKB
ATTACKERKB
added 2026/03/06 1:32 a.m.5 views

CVE-2026-3616

A vulnerability was detected in DefaultFuction Jeson Customer Relationship Management System 1.0.0. Impacted is an unknown function of the file /modules/customers/edit.php. Performing a manipulation of the argument ID results in sql injection. The attack may be initiated remotely. The exploit is...

6.5CVSS5.8AI score0.00204EPSS
Exploits0References7Affected Software1
CVE
CVE
added 2026/03/06 1:32 a.m.13 views

CVE-2026-3616

The CVE affects DefaultFuction Jeson Customer Relationship Management System 1.0.0. The vulnerability is in /modules/customers/edit.php, where manipulating the ID parameter results in a SQL injection. The exploit is publicly available and may be invoked remotely, with exploit maturity listed as p...

6.5CVSS6.5AI score0.00204EPSS
Exploits0References7
Rows per page
Query Builder