DefaultFuction CRM vulnerabilities

A vulnerability was detected in DefaultFuction CRM 1.0.0. This impacts an unknown function of the file /modules/customers/delete.php. Performing a manipulation of the argument ID results in sql injection. It is possible to initiate the attack remotely. The exploit is now public and may be used.

A security vulnerability has been detected in DefaultFuction CRM 1.0.0. This affects an unknown function of the file /modules/orders/delete.php. Such manipulation of the argument ID leads to sql injection. The attack may be performed from remote. The exploit has been disclosed publicly and may be used.

A vulnerability has been identified in DefaultFuction CRM 1.0.0, specifically in the file /modules/orders/edit.php. Manipulation of the ID argument leads to SQL injection. The attack can be performed remotely, and the exploit has been publicly disclosed.