Search
Search Results (9 CVEs found)
| CVE | Vendors | Products | Updated | CVSS v3.1 |
|---|---|---|---|---|
| CVE-2025-71457 | 1 Vtenext | 1 Vtenext | 2026-11-04 | 9.8 Critical |
| vtenext 25.02 before 25.02.1 contains an authentication bypass vulnerability that allows unauthenticated attackers to change any account password via hub/rpwd.php without token verification. Attackers knowing a valid user_name can send action=change_password to RecoverPwd::displayChangePwd() and log in as administrators lacking two-factor authentication. | ||||
| CVE-2025-71456 | 1 Vtenext | 1 Vtenext | 2026-11-04 | 8.1 High |
| vtenext before 25.02.2 contains an SQL injection vulnerability that allows authenticated low-privileged users to inject SQL by supplying a crafted fieldname parameter to modules/Fax/EditView.php. Attackers can read arbitrary database contents, including password reset tokens stored in vte_userauthtoken, to take over other user accounts. | ||||
| CVE-2025-71455 | 1 Vtenext | 1 Vtenext | 2026-11-04 | 5.3 Medium |
| vtenext before 25.02.2 contains a session identifier disclosure vulnerability that allows attackers to read the PHPSESSID value returned by the Touch web service endpoint. Attackers who can run script in the vtenext origin, such as through cross-site scripting, can bypass the HttpOnly flag and hijack authenticated sessions. | ||||
| CVE-2025-71454 | 1 Vtenext | 1 Vtenext | 2026-11-04 | 6.5 Medium |
| vtenext before 25.02.2 contains a cross-site request forgery protection bypass because csrf_check() in include/utils/VteCsrf.php skips __csrf_token validation for non-POST requests. Attackers can induce a logged-in user to open a crafted link sending state-changing GET requests, which handlers read from $_REQUEST, performing actions as that user. | ||||
| CVE-2025-71453 | 1 Vtenext | 1 Vtenext | 2026-11-04 | 6.1 Medium |
| vtenext before 25.02.2 contains a reflected cross-site scripting vulnerability in modules/Home/HomeWidgetBlockList.php that echoes unsanitized widgetId keys from the widgetInfoList JSON parameter. Attackers can induce a logged-in user to submit a crafted POST request with HTML in widgetId keys, executing JavaScript in the victim's vtenext session. | ||||
| CVE-2023-46694 | 1 Vtenext | 1 Vtenext | 2026-04-15 | 8.1 High |
| Vtenext 21.02 allows an authenticated attacker to upload arbitrary files, potentially enabling them to execute remote commands. This flaw exists due to the application's failure to enforce proper authentication controls when accessing the Ckeditor file manager functionality. | ||||
| CVE-2020-10229 | 1 Vtenext | 1 Vtenext | 2024-11-21 | 8.8 High |
| A CSRF issue in vtecrm vtenext 19 CE allows attackers to carry out unwanted actions on an administrator's behalf, such as uploading files, adding users, and deleting accounts. | ||||
| CVE-2020-10228 | 1 Vtenext | 1 Vtenext | 2024-11-21 | 8.8 High |
| A file upload vulnerability in vtecrm vtenext 19 CE allows authenticated users to upload files with a .pht extension, resulting in remote code execution. | ||||
| CVE-2020-10227 | 1 Vtenext | 1 Vtenext | 2024-11-21 | 6.1 Medium |
| A cross-site scripting (XSS) vulnerability in the messages module of vtecrm vtenext 19 CE allows attackers to inject arbitrary JavaScript code via the From field of an email. | ||||
Page 1 of 1.