CVE-2025-69214

CVE-2025-69214: OpenSTAManager: SQL-инъекция в ajaxselect.php endpoint componenti Обзор Поле| Детали ---|--- CVE ID| CVE-2025-69214 Severity| ВЫСОКИЙ Advisory| Посмотреть рекомендацию Обнаружено| Lukasz Rybak Затронутые продукты devcode-it/openstamanager версии: = 2.9.8 Классификация CWE CWE-89:...

CVE-2025-69214 OpenSTAManager has a SQL Injection in ajax_select.php (componenti endpoint)

OpenSTAManager is an open source management software for technical assistance and invoicing. In 2.9.8 and earlier, an SQL Injection vulnerability exists in the ajaxselect.php endpoint when handling the componenti operation. An authenticated attacker can inject malicious SQL code through the...

CVE-2025-69214: Improper Neutralization of Special Elements used in an SQL Command

OpenSTAManager is an open source management software for technical assistance and invoicing. In 2.9.8 and earlier, an SQL Injection vulnerability exists in the ajaxselect.php endpoint when handling the componenti operation. An authenticated attacker can inject malicious SQL code through the...