Skip to content
OpenAdvisories

Vendor

vtenext

5 known vulnerabilities.

Products

1 result · Clear filters · Feed

  • High 8.1

    vtenext before 25.02.2 SQL Injection via fieldname in Fax EditView

    vtenext before 25.02.2 contains an SQL injection vulnerability that allows authenticated low-privileged users to inject SQL by supplying a crafted fieldname parameter to modules/Fax/EditView.php. Attackers can read arbitrary database contents, including passw…