Threats tagged 'ghsa-7pcp-87fg-9mfg'

1 threat

Severity	CVSS	Threat	Source	Published	Score and star
High	8.6	CVE-2025-71456vtenext before 25.02.2 contains an SQL injection vulnerability that allows authenticated low-privileged users to High8.62026-11-04GCVE DatabaseCVE-2025-71456 vtenext versions prior to 25.02.2 contain an SQL injection vulnerability in the modules/Fax/EditView.php component. This flaw allows authenticated users with low privileges to inject SQL via a crafted fieldname parameter. Exploitation can lead to unauthorized reading of database contents, including sensitive password reset tokens, enabling account takeover of other users. Report on CVE-2025-71456 Vulnerability CWE-89 #ghsa-7pcp-87fg-9mfg	GCVE Database	2026-11-04

Page 1 of 1