Approved changes feed: RSS · Atom

cpe:2.3:a:vtenext:vtenext:19:*:*:*:community:*:*:*

part: a version: 19 update: *

VendorVtenext (85d1b106-8cee-51f7-8dbd-a8f0a7983b7a)
ProductVtenext (e93cb5e0-1752-531d-bbc4-e1004c015d31)
Edition*
Language*
Software editioncommunity
Target software*
Target hardware*
Other*

Notes

Imported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
pkg:github/manueltag/vtenext purl2cpe 2026-06-01 10:17:44.286453
pkg:github/vtecrm/vtenext purl2cpe 2026-06-01 10:17:44.286455
pkg:sourceforge/vtecrm purl2cpe 2026-06-01 10:17:44.286458

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2020-10229 vulnerable 2026-06-08 05:16:34.900163 Details available
A CSRF issue in vtecrm vtenext 19 CE allows attackers to carry out unwanted actions on an administrator's behalf, such as uploading files, adding users, and deleting accounts.
Published: 2020-09-14T19:55:07.000Z
Updated: 2024-08-04T10:58:40.125Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2020-10228 vulnerable 2026-06-08 05:16:34.899824 Details available
A file upload vulnerability in vtecrm vtenext 19 CE allows authenticated users to upload files with a .pht extension, resulting in remote code execution.
Published: 2020-09-14T19:56:58.000Z
Updated: 2024-08-04T10:58:39.959Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2020-10227 vulnerable 2026-06-08 05:16:34.899404 Details available
A cross-site scripting (XSS) vulnerability in the messages module of vtecrm vtenext 19 CE allows attackers to inject arbitrary JavaScript code via the From field of an email.
Published: 2020-09-14T19:58:33.000Z
Updated: 2024-08-04T10:58:39.834Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.

Inspect record JSON

Open JSON directly

Open this panel to browse, search, copy or download the JSON record.