CVE-2025-69213

CVE-2025-69213: OpenSTAManager tiene una inyección SQL en ajaxcomplete.php endpoint getsedi Descripción general Campo| Detalles ---|--- ID de CVE| CVE-2025-69213 Gravedad| ALTA Aviso| Ver aviso Descubierto por| Lukasz Rybak Productos afectados devcode-it/openstamanager versiones: fetchArray$q;...

CVE-2025-69213

OpenSTAManager is an open source management software for technical assistance and invoicing. In version 2.9.8 and prior, a SQL Injection vulnerability exists in the ajaxcomplete.php endpoint when handling the getsedi operation. An authenticated attacker can inject malicious SQL code through the...

CVE-2025-69213: Improper Neutralization of Special Elements used in an SQL Command

OpenSTAManager is an open source management software for technical assistance and invoicing. In version 2.9.8 and prior, a SQL Injection vulnerability exists in the ajaxcomplete.php endpoint when handling the getsedi operation. An authenticated attacker can inject malicious SQL code through the...