high8.8
CVE-2020-10228
A file upload vulnerability in vtecrm vtenext 19 CE allows authenticated users to upload files with a .pht extension, resulting in remote code execution.
Impact
A file upload vulnerability in vtecrm vtenext 19 CE allows authenticated users to upload files with a .pht extension, resulting in remote code execution.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Vtenext | Vtenext | Version 19 |