CVE-2026-24416

CVE-2026-24416: OpenSTAManager 아티클 가격 책정 모듈의 시간 기반 블라인드 SQL 인젝션 개요 필드| 세부 정보 ---|--- CVE ID| CVE-2026-24416 심각도| 높음 보안 권고| 보안 권고 보기 발견자| Lukasz Rybak 영향을 받는 제품 devcode-it/openstamanager 버전: = 2.9.8 CWE 분류 CWE-89: SQL 명령에 사용되는 특수 요소의 부적절한 중화 'SQL 인젝션' 세부 정보 요약 OpenSTAManager v2.9.8의 아티클 가격 책정 모듈에 ...

GHSA-P864-FQGV-92Q4 OpenSTAManager has a Time-Based Blind SQL Injection in Article Pricing Module

Summary Critical Time-Based Blind SQL Injection vulnerability in the article pricing module of OpenSTAManager v2.9.8 allows authenticated attackers to extract complete database contents including user credentials, customer data, and financial records through time-based Boolean inference attacks...

OpenSTAManager has a Time-Based Blind SQL Injection in Article Pricing Module

Summary Critical Time-Based Blind SQL Injection vulnerability in the article pricing module of OpenSTAManager v2.9.8 allows authenticated attackers to extract complete database contents including user credentials, customer data, and financial records through time-based Boolean inference attacks...