CVE-2025-69214

CVE-2025-69214：OpenSTAManager 在 ajaxselect.php（componenti 端点）中存在 SQL 注入漏洞 概述 字段| 详细信息 ---|--- CVE ID| CVE-2025-69214 严重性| 高 公告| 查看公告 发现者| Lukasz Rybak 受影响的产品 devcode-it/openstamanager （版本： SQLMap 利用： root@kitploit: sqlmap -u 'http://localhost:8081/ajaxselect.php?op=componenti&optionsmatricola=1' ...

CVE-2025-69214 OpenSTAManager has a SQL Injection in ajax_select.php (componenti endpoint)

OpenSTAManager is an open source management software for technical assistance and invoicing. In 2.9.8 and earlier, an SQL Injection vulnerability exists in the ajaxselect.php endpoint when handling the componenti operation. An authenticated attacker can inject malicious SQL code through the...