Show filters
3 Total Results
Displaying 1-3 of 3
Sort by:
Attacker Value
Unknown
CVE-2020-10227
Disclosure Date: September 14, 2020 (last updated February 22, 2025)
A cross-site scripting (XSS) vulnerability in the messages module of vtecrm vtenext 19 CE allows attackers to inject arbitrary JavaScript code via the From field of an email.
0
Attacker Value
Unknown
CVE-2020-10229
Disclosure Date: September 14, 2020 (last updated February 22, 2025)
A CSRF issue in vtecrm vtenext 19 CE allows attackers to carry out unwanted actions on an administrator's behalf, such as uploading files, adding users, and deleting accounts.
0
Attacker Value
Unknown
CVE-2020-10228
Disclosure Date: September 14, 2020 (last updated February 22, 2025)
A file upload vulnerability in vtecrm vtenext 19 CE allows authenticated users to upload files with a .pht extension, resulting in remote code execution.
0
