CVE-2025-71456

A flaw was found in vtenext. A Structured Query Language SQL injection vulnerability exists in the Fax module due to improper validation of the fieldname parameter. An authenticated remote attacker with low privileges can exploit this flaw by sending a specially crafted request to execute arbitra...