EUVD-2020-2686

Malware in sbrugna...

CVE-2020-10227

A cross-site scripting XSS vulnerability in the messages module of vtecrm vtenext 19 CE allows attackers to inject arbitrary JavaScript code via the From field of an email...

CVE-2020-10228

A file upload vulnerability in vtecrm vtenext 19 CE allows authenticated users to upload files with a .pht extension, resulting in remote code execution...

Unrestricted file upload

A file upload vulnerability in vtecrm vtenext 19 CE allows authenticated users to upload files with a .pht extension, resulting in remote code execution...

CVE-2020-10228

A file upload vulnerability in vtecrm vtenext 19 CE allows authenticated users to upload files with a .pht extension, resulting in remote code execution...

PT-2020-11985

Name of the Vulnerable Software and Affected Versions vtecrm vtenext version 19 CE Description A file upload issue allows authenticated users to upload files with a .pht extension, resulting in remote code execution. Recommendations For version 19 CE, restrict file uploads to prevent the upload o...

PT-2020-11984

Name of the Vulnerable Software and Affected Versions vtecrm vtenext version 19 CE Description A cross-site scripting XSS issue in the messages module allows attackers to inject arbitrary JavaScript code via the From field of an email. Recommendations For version 19 CE, consider restricting acces...

CVE-2020-10228: Unrestricted Upload of File with Dangerous Type

A file upload vulnerability in vtecrm vtenext 19 CE allows authenticated users to upload files with a .pht extension, resulting in remote code execution...

CVE-2020-10227: Improper Neutralization of Input During Web Page Generation

A cross-site scripting XSS vulnerability in the messages module of vtecrm vtenext 19 CE allows attackers to inject arbitrary JavaScript code via the From field of an email...

CVE-2020-10229: Cross-Site Request Forgery (CSRF)

A CSRF issue in vtecrm vtenext 19 CE allows attackers to carry out unwanted actions on an administrator's behalf, such as uploading files, adding users, and deleting accounts...

PT-2020-11986

Name of the Vulnerable Software and Affected Versions vtecrm vtenext version 19 CE Description A CSRF issue allows attackers to carry out unwanted actions on an administrator's behalf, such as uploading files, adding users, and deleting accounts. Recommendations For vtecrm vtenext version 19 CE,...