defaultfuction content management system vulnerabilities

Latest defaultfuction content management system CVEs

Newest publication first

1. CVE-2026-5333 DefaultFuction Content-Management-System tools.php command injection

   Published 2026-04-02

   Medium·CVSS 6.9 EPSS 3.0%

   A security flaw has been discovered in DefaultFuction Content-Management-System 1.0. This issue affects some unknown processing of the file /admin/tools.php. The manipulation of the argument host results in command injection. The attack can be executed remotely. The exploit has b...

Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.