Vulnerabilities (CVE)

Filtered by vendor Vtenext Subscribe
Filtered by product Vtenext
CVE Vendors Products Updated CVSS v2 CVSS v3
CVE-2020-10228 1 Vtenext 1 Vtenext 2020-09-18 6.5 MEDIUM 8.8 HIGH
A file upload vulnerability in vtecrm vtenext 19 CE allows authenticated users to upload files with a .pht extension, resulting in remote code execution.
CVE-2020-10229 1 Vtenext 1 Vtenext 2020-09-18 6.8 MEDIUM 8.8 HIGH
A CSRF issue in vtecrm vtenext 19 CE allows attackers to carry out unwanted actions on an administrator's behalf, such as uploading files, adding users, and deleting accounts.