DefaultFuction vulnerabilities
We track 2 vulnerabilities in DefaultFuction products across 2 products. 2 are rated high or critical, and none are known to be exploited. The most recent was published on April 2, 2026.
2vulnerabilities
1critical
1high
0exploited
8.6average CVSS score
Latest DefaultFuction vulnerabilities
- 9.8 Critical severity
Content-Management-System: Improper Neutralization of Special Elements used in a Command
A security flaw has been discovered in DefaultFuction Content-Management-System 1.0. This issue affects some unknown processing of the file /admin/tools.php. The manipulation of the argument host results in command injection. The attack can be executed remotel
- 7.3 High severity
Jeson-Customer-Relationship-Management-System: Server-Side Request Forgery
A security vulnerability has been detected in DefaultFuction Jeson-Customer-Relationship-Management-System up to 1b4679c4d06b90d31dd521c2b000bfdec5a36e00. This affects an unknown function of the file /api/System.php of the component API Module. The manipulatio