CVE-2026-86172 | DefaultFuction CRM 1.0.0 delete.php ID sql injection

A vulnerability, which was classified as critical, has been found in DefaultFuction CRM 1.0.0. This impacts an unknown function of the file /modules/customers/delete.php. Performing a manipulation of the argument ID results in sql injection.

This vulnerability is cataloged as CVE-2026-86172. It is possible to initiate the attack remotely. Furthermore, there is an exploit available.VulDB Recent EntriesRead More