PT-2026-23626 · Defaultfuction · Jeson Customer Relationship Management System

Practice · Publicado 2026-03-06 · Atualizado 2026-03-06 · CVE-2026-3616

Positive Technologies (AI Summary)

CVSS v2.0

6.5

Média

Vetor base

AV:N/AC:L/Au:S/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions DefaultFuction Jeson Customer Relationship Management System version 1.0.0

Description A SQL injection issue exists in DefaultFuction Jeson Customer Relationship Management System version 1.0.0. The issue is located in the /modules/customers/edit.php file. Manipulation of the ID argument can lead to SQL injection. The attack can be initiated remotely. The exploit is publicly available.

Recommendations Install the patch f0e991870e9d33701cca3a1d0fd4eec135af01a6 to address this issue.

Exploit

Correção

SQL injection

Special Elements Injection

Enumeração de Fraquezas

CWE-89

CWE-74

Identificadores relacionados

CVE-2026-3616

Produtos afetados

Jeson Customer Relationship Management System

Referências · 12

• 🔥 https://github.com/DefaultFuction/Jeson-Customer-Relationship-Management-System/issues/1#issue-3972001812 · Exploit
• https://github.com/DefaultFuction/Jeson-Customer-Relationship-Management-System/issues/1#issuecomment-3982939567 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2026-3616 · Nota de Segurança
• https://vuldb.com/?ctiid.349234 · Nota
• https://github.com/DefaultFuction/Jeson-Customer-Relationship-Management-System/commit/f0e991870e9d33701cca3a1d0fd4eec135af01a6 · Correção
• https://twitter.com/cyberbivash/status/2029786062470496702 · Publicação no Twitter
• https://vuldb.com/?submit.765096 · Nota
• https://osv.dev/vulnerability/CVE-2026-3616 · Aviso do Fabricante
• https://twitter.com/VulmonFeeds/status/2029786870507266307 · Publicação no Twitter
• https://t.me/cveNotify/154452 · Publicação no Telegram
• https://github.com/DefaultFuction/Jeson-Customer-Relationship-Management-System/issues/1 · Nota
• https://vuldb.com/?id.349234 · Nota