{"description":"Trending threats, MITRE ATT\u0026CK coverage, and detection metadata. Fed continuously.","favicon":"https://feed.craftedsignal.io/favicon-32x32.png","feed_url":"https://feed.craftedsignal.io/products/vtenext--25.02.2/feed.json","home_page_url":"https://feed.craftedsignal.io/","icon":"https://feed.craftedsignal.io/apple-touch-icon.png","items":[{"_cs_actors":[],"_cs_cpes":["cpe:2.3:a:vtenext:vtenext:*:*:*:*:*:*:*:*"],"_cs_cves":[{"cvss":8.1,"id":"CVE-2025-71456"}],"_cs_exploited":false,"_cs_has_poc":false,"_cs_poc_references":[],"_cs_products":["vtenext (\u003c 25.02.2)"],"_cs_severities":["high"],"_cs_tags":[],"_cs_type":"advisory","_cs_vendors":["vtenext"],"content_html":"\u003cp\u003evtenext versions prior to 25.02.2 contain an SQL injection vulnerability located in the \u003ccode\u003emodules/Fax/EditView.php\u003c/code\u003e component. An authenticated, low-privileged user can exploit this by providing a crafted \u003ccode\u003efieldname\u003c/code\u003e parameter to the affected script. Successful exploitation allows for unauthorized read access to database tables, including the \u003ccode\u003evte_userauthtoken\u003c/code\u003e table, which may lead to account takeover via token extraction.\u003c/p\u003e\n\u003ch2 id=\"impact\"\u003eImpact\u003c/h2\u003e\n\u003cp\u003eSuccessful exploitation results in unauthorized access to sensitive database information, specifically session or password reset tokens. This enables full account takeover of targeted users.\u003c/p\u003e\n\u003ch2 id=\"recommendation\"\u003eRecommendation\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eUpgrade to vtenext version 25.02.2 or later immediately to remediate the vulnerability.\u003c/li\u003e\n\u003cli\u003eAudit database access logs for unusual queries originating from the \u003ccode\u003emodules/Fax/EditView.php\u003c/code\u003e endpoint.\u003c/li\u003e\n\u003cli\u003eRestrict access to the \u003ccode\u003emodules/Fax/EditView.php\u003c/code\u003e file to authorized administrative roles only if an immediate upgrade is not feasible.\u003c/li\u003e\n\u003c/ul\u003e\n","date_modified":"2026-11-04T22:07:01Z","date_published":"2026-11-04T22:07:01Z","id":"https://feed.craftedsignal.io/briefs/2026-11-vtenext-sqli/","summary":"An SQL injection vulnerability in vtenext modules/Fax/EditView.php allows authenticated low-privileged users to extract sensitive database content, including password reset tokens.","title":"vtenext: SQL injection in Fax module (CVE-2025-71456)","url":"https://feed.craftedsignal.io/briefs/2026-11-vtenext-sqli/"}],"language":"en","title":"CraftedSignal Threat Feed - Vtenext (\u003c 25.02.2)","version":"https://jsonfeed.org/version/1.1"}