Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1359 CNY

100%

openstamanager — Vulnerabilities & Security Advisories 16

All 16 CVE vulnerabilities found in openstamanager, with AI-generated Chinese analysis, references, and POCs.

This page aggregates security advisories and vulnerability reports specifically for the openstamanager product developed by its vendor, categorized by distinct weakness types and associated security tags. The collection encompasses a comprehensive range of identified flaws, including remote code execution, privilege escalation, and information disclosure issues, covering the product's entire release history from its initial launch through the most recent updates. Users can utilize this resource to track the vendor's official security advisories over time, analyze the prevalence and impact of specific weakness classes within the application, or review the complete vulnerability history of openstamanager to assess its security posture. The data presented here is compiled from public disclosures and vendor notifications to provide an objective view of known risks without editorial commentary or promotional content. By centralizing these records, the page facilitates efficient research for security professionals, auditors, and system administrators who need to evaluate exposure or plan remediation strategies. The aggregation supports detailed filtering options, allowing readers to isolate specific vulnerability categories or narrow results by publication date to focus on recent threats. This structured approach ensures that critical security information remains accessible and actionable for those responsible for maintaining the integrity of systems running openstamanager.

Vendor: devcode-it

CVE ID Title CVSS Severity Published
CVE-2026-35470 OpenSTAManager has a SQL Injection via righe Parameter in confronta_righe Modals CWE-89 8.8 High 2026-04-06
CVE-2026-35168 OpenSTAManager: SQL Injection via Aggiornamenti Module CWE-89 8.8 High 2026-04-02
CVE-2026-28805 OpenSTAManager: Time-Based Blind SQL Injection via `options[stato]` Parameter CWE-89 8.8 High 2026-04-02
CVE-2026-29782 OpenSTAManager: Remote Code Execution via Insecure Deserialization in OAuth2 CWE-502 7.2 High 2026-04-02
CVE-2026-27012 Unauthenticated privilege escalation in OpenSTAManager via modules/utenti/actions.php CWE-306 9.8 Critical 2026-03-03
CVE-2026-24415 OpenSTAManager affected by reflected XSS in modifica_iva.php via righe parameter CWE-79 6.1AI Medium AI 2026-03-03
CVE-2025-69212 OpenSTAManager has an OS Command Injection in P7M File Processing CWE-78 8.8AI High AI 2026-02-06
CVE-2025-69214 OpenSTAManager has a SQL Injection in ajax_select.php (componenti endpoint) CWE-89 8.8AI High AI 2026-02-06
CVE-2025-69216 OpenSTAManager has an SQL Injection in Scadenzario Print Template CWE-89 6.5AI Medium AI 2026-02-06
CVE-2026-24416 OpenSTAManager has a Time-Based Blind SQL Injection in Article Pricing Module CWE-89 9.1AI Critical AI 2026-02-06
CVE-2026-24417 OpenSTAManager has a Time-Based Blind SQL Injection with Amplified Denial of Service CWE-89 9.1AI Critical AI 2026-02-06
CVE-2026-24418 OpenSTAManager has an SQL Injection vulnerability in the Scadenzario bulk operations module CWE-89 8.1AI High AI 2026-02-06
CVE-2026-24419 OpenSTAManager has an SQL Injection in the Prima Nota module CWE-89 9.1AI Critical AI 2026-02-06
CVE-2025-69215 OpenSTAManager has an SQL Injection in the Stampe Module CWE-89 8.8AI High AI 2026-02-04
CVE-2025-69213 OpenSTAManager has a SQL Injection in ajax_complete.php (get_sedi endpoint) CWE-89 8.8AI High AI 2026-02-04
CVE-2025-65103 OpenSTAManager has an authenticated SQL Injection vulnerability in API via 'display' parameter CWE-89 8.8 High 2025-11-19

All 16 known CVE vulnerabilities affecting openstamanager with full Chinese analysis, references, and POCs where available.