Количество 2
Количество 2
CVE-2025-69214
OpenSTAManager is an open source management software for technical assistance and invoicing. In 2.9.8 and earlier, an SQL Injection vulnerability exists in the ajax_select.php endpoint when handling the componenti operation. An authenticated attacker can inject malicious SQL code through the options[matricola] parameter.
GHSA-qjv8-63xq-gq8m
OpenSTAManager has a SQL Injection in ajax_select.php (componenti endpoint)
Уязвимостей на страницу
Уязвимость | CVSS | EPSS | Опубликовано | |
|---|---|---|---|---|
 | CVE-2025-69214 OpenSTAManager is an open source management software for technical assistance and invoicing. In 2.9.8 and earlier, an SQL Injection vulnerability exists in the ajax_select.php endpoint when handling the componenti operation. An authenticated attacker can inject malicious SQL code through the options[matricola] parameter. | 0% Низкий | 2 дня назад | |
| GHSA-qjv8-63xq-gq8m OpenSTAManager has a SQL Injection in ajax_select.php (componenti endpoint) | 0% Низкий | 2 дня назад |
Уязвимостей на страницу