Vtenext Vtenext vulnerabilities

• vtenext vtenext 25.02 before 25.02.1 Unverified Password Change via hub/rpwd.php CVE-2025-71457 9.3 CriticalNovember 4, 2026
• vtenext vtenext before 25.02.2 SQL Injection via fieldname in Fax EditView CVE-2025-71456 8.6 HighNovember 4, 2026
• vtenext vtenext before 25.02.2 Session Identifier Disclosure via Touch Web Service CVE-2025-71455 5.9 MediumNovember 4, 2026
• vtenext vtenext before 25.02.2 CSRF Protection Bypass via HTTP Method Tampering CVE-2025-71454 6.9 MediumNovember 4, 2026
• vtenext vtenext before 25.02.2 Reflected XSS via widgetInfoList in HomeWidgetBlockList CVE-2025-71453 5.1 MediumNovember 4, 2026
• vtenext Vtenext 21.02 allows an authenticated attacker to upload arbitrary files, potentially enabling them to execute remote commands. This flaw exists due to the application's failure to enforce proper auth… CVE-2023-46694 Public exploit 8.1 HighMay 28, 2024
• vtenext A cross-site scripting (XSS) vulnerability in the messages module of vtecrm vtenext 19 CE allows... CVE-2020-10227 6.1 MediumSeptember 14, 2020
• vtenext A file upload vulnerability in vtecrm vtenext 19 CE allows authenticated users to upload files... CVE-2020-10228 8.8 HighSeptember 14, 2020
• vtenext A CSRF issue in vtecrm vtenext 19 CE allows attackers to carry out unwanted actions on an... CVE-2020-10229 8.8 HighSeptember 14, 2020