Skip to content
OpenAdvisories

Vendor

vtenext

5 known vulnerabilities.

Products

1 result · Clear filters · Feed

  • Critical 9.8

    vtenext 25.02 before 25.02.1 Unverified Password Change via hub/rpwd.php

    vtenext 25.02 before 25.02.1 contains an authentication bypass vulnerability that allows unauthenticated attackers to change any account password via hub/rpwd.php without token verification. Attackers knowing a valid user_name can send action=change_password …