CVE-2026-24416

CVE-2026-24416: OpenSTAManager presenta una SQL Injection Blind Basata sul Tempo nel Modulo Prezzi Articoli Panoramica Campo| Dettagli ---|--- ID CVE| CVE-2026-24416 Gravità| ALTA Avviso| Visualizza Avviso Scoperto da| Lukasz Rybak Prodotti Interessati devcode-it/openstamanager versioni: = 2.9.8...

GHSA-P864-FQGV-92Q4 OpenSTAManager has a Time-Based Blind SQL Injection in Article Pricing Module

Summary Critical Time-Based Blind SQL Injection vulnerability in the article pricing module of OpenSTAManager v2.9.8 allows authenticated attackers to extract complete database contents including user credentials, customer data, and financial records through time-based Boolean inference attacks...

OpenSTAManager has a Time-Based Blind SQL Injection in Article Pricing Module

Summary Critical Time-Based Blind SQL Injection vulnerability in the article pricing module of OpenSTAManager v2.9.8 allows authenticated attackers to extract complete database contents including user credentials, customer data, and financial records through time-based Boolean inference attacks...