CVE-2026-3616

See a problem?
Please try reporting it to the source first.

Source

https://cve.org/CVERecord?id=CVE-2026-3616

Import Source

https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2026-3616.json

JSON Data

https://api.osv.dev/v1/vulns/CVE-2026-3616

Published

2026-03-06T01:32:08.323Z

Modified

2026-07-24T04:01:43.583843836Z

Severity

2.1 (Low) CVSS_V4 - CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P CVSS Calculator

Summary

DefaultFuction Jeson Customer Relationship Management System edit.php sql injection

Details

A vulnerability was detected in DefaultFuction Jeson Customer Relationship Management System 1.0.0. Impacted is an unknown function of the file /modules/customers/edit.php. Performing a manipulation of the argument ID results in sql injection. The attack may be initiated remotely. The exploit is now public and may be used. The patch is named f0e991870e9d33701cca3a1d0fd4eec135af01a6. It is suggested to install a patch to address this issue.

Database specific

{
    "osv_generated_from": "https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/3xxx/CVE-2026-3616.json",
    "cwe_ids": [
        "CWE-74",
        "CWE-89"
    ],
    "cna_assigner": "VulDB"
}

References

Affected packages

Git / github.com/DefaultFuction/Customer-Relationship-Management-System

Affected ranges

Type

GIT

Repo

https://github.com/DefaultFuction/Customer-Relationship-Management-System

Events

Introduced

e8acada2ff7161897b8e124a20369efcaf82072d

Fixed

f0e991870e9d33701cca3a1d0fd4eec135af01a6

Database specific

{
    "source": [
        "AFFECTED_FIELD",
        "REFERENCES"
    ],
    "extracted_events": [
        {
            "introduced": "1.0.0"
        },
        {
            "last_affected": "1.0.0"
        }
    ]
}

Affected versions

1.*

1.0.0

V1.*

V1.0.0

Database specific

source

"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2026-3616.json"