2 matches found
GHSA-4J2X-JH4M-FQV6 OpenSTAManager has a SQL Injection in the Prima Nota module
Summary Critical Error-Based SQL Injection vulnerability in the Prima Nota Journal Entry module of OpenSTAManager v2.9.8 allows authenticated attackers to extract complete database contents including user credentials, customer PII, and financial records through XML error messages by injecting...
8.7CVSS6.2AI score0.00344EPSS
SaveExploits3References3
20