286 matches found
CVE-2025-69213
CVE-2025-69213: OpenSTAManager has a SQL Injection in ajaxcomplete.php getsedi endpoint Overview Field| Details ---|--- CVE ID| CVE-2025-69213 Severity| HIGH Advisory| View Advisory Discovered by| Lukasz Rybak Affected Products devcode-it/openstamanager versions: fetchArray$q; Data Flow 1. Source...
CVE-2025-69214
CVE-2025-69214: OpenSTAManager has a SQL Injection in ajaxselect.php componenti endpoint Overview Field| Details ---|--- CVE ID| CVE-2025-69214 Severity| HIGH Advisory| View Advisory Discovered by| Lukasz Rybak Affected Products devcode-it/openstamanager versions: !imagehttps://a...
CVE-2025-69216
CVE-2025-69216: OpenSTAManager has a SQL Injection in Scadenzario Print Template Overview Field| Details ---|--- CVE ID| CVE-2025-69216 Severity| HIGH Advisory| View Advisory Discovered by| Lukasz Rybak Affected Products devcode-it/openstamanager versions: = 2.9.8 CWE Classification CWE-89:...
CVE-2025-69215
CVE-2025-69215: OpenSTAManager has an SQL Injection in the Stampe Module Overview Field| Details ---|--- CVE ID| CVE-2025-69215 Severity| HIGH Advisory| View Advisory Discovered by| Lukasz Rybak Affected Products devcode-it/openstamanager versions: query'UPDATE zzprints SET predefined = 0 WHERE...
CVE-2025-69212-PoC
CVE-2025-69212 - OpenSTAManager OS Command Injection PoC Usage Install dependencies: pip install -r requirements.txt Run a single command and print its output: python3 cve-2025-69212poc.py -u http://target.com -U admin -P 'password' -c 'id' Drop a persistent PHP webshell instead: python3...
Exploit for Deserialization of Untrusted Data in Devcode Openstamanager
CVE-2026-29782 — OpenSTAManager auth-SQLi → PHP object injecti...
Cross-site Scripting (XSS)
Overview devcode-it/openstamanager is a management software for technical assistance and electronic invoicing Affected versions of this package are vulnerable to Cross-site Scripting XSS in the edit.php process. An attacker can inject arbitrary HTML content into the application interface by...
GHSA-CRX4-7MMQ-J74J OpenSTAManager has HTML Injection in modules/utenti/edit.php
Summary An HTML Injection vulnerability exists in the user group creation functionality that allows an attacker to inject arbitrary HTML content into the application interface. The vulnerability occurs when user-supplied input in the group name field is not properly sanitized before being rendere...
Exploit for OS Command Injection in Devcode Openstamanager
CVE-2025-69212 - OpenSTAManager P7M Command Injection Exploit...
Exploit for OS Command Injection in Devcode Openstamanager
OpenSTA-Exploit --- About CVE-2025-...
Exploit for OS Command Injection in Devcode Openstamanager
🛡️ Hack The Box - Enigma Findings Report 📋 Overview This reposit...
Exploit for OS Command Injection in Devcode Openstamanager
No d...
Exploit for Unrestricted Upload of File with Dangerous Type in Devcode Openstamanager
CVE-2026-38751 – OpenSTAManager Arbitrary File Upload PoC T...
Exploit for OS Command Injection in Devcode Openstamanager
CVE-2025-69212 --- Description OpenSTAManager is a manag...
Exploit for Unrestricted Upload of File with Dangerous Type in Devcode Openstamanager
OpenSTAManager RCE Exploit CVE-2026-38751 Overview This...
Exploit for OS Command Injection in Devcode Openstamanager
CVE-2025-69212 - OpenSTAManager OS Command Injection PoC U...
Exploit for OS Command Injection in Devcode Openstamanager
CVE-2025-69212 OpenSTAManager --check Vulnerabili...
Exploit for OS Command Injection in Devcode Openstamanager
CVE-2025-69212-PoC https://github.com/advisories/GHSA-25fp-8w8...