Vendor
vtenext
5 known vulnerabilities.
Products
1 result · Clear filters · Feed
-
High 8.1
vtenext before 25.02.2 SQL Injection via fieldname in Fax EditView
vtenext before 25.02.2 contains an SQL injection vulnerability that allows authenticated low-privileged users to inject SQL by supplying a crafted fieldname parameter to modules/Fax/EditView.php. Attackers can read arbitrary database contents, including passw…