Marco Ruela

3 exploits Active since Sep 2020
CVE-2020-10229 EXPLOITDB HIGH python WORKING POC
vtenext 19 CE - Cross-Site Request Forgery
A CSRF issue in vtecrm vtenext 19 CE allows attackers to carry out unwanted actions on an administrator's behalf, such as uploading files, adding users, and deleting accounts.
CVSS 8.8
CVE-2020-10228 EXPLOITDB HIGH python WORKING POC
vtenext 19 CE - Authenticated Remote Code Execution via .pht File Upload
A file upload vulnerability in vtecrm vtenext 19 CE allows authenticated users to upload files with a .pht extension, resulting in remote code execution.
CVSS 8.8
CVE-2020-10227 EXPLOITDB MEDIUM python WORKING POC
vtenext 19 CE - Stored Cross-Site Scripting via Email From Field
A cross-site scripting (XSS) vulnerability in the messages module of vtecrm vtenext 19 CE allows attackers to inject arbitrary JavaScript code via the From field of an email.
CVSS 6.1