CVE-2026-24416

CVE-2026-24416: OpenSTAManager presenta una SQL Injection Blind Basata sul Tempo nel Modulo Prezzi Articoli Panoramica...

OpenSTAManager has a Time-Based Blind SQL Injection in Article Pricing Module

Summary Critical Time-Based Blind SQL Injection vulnerability in the article pricing module of OpenSTAManager v2.9.8 allows authenticated attackers to extract complete database contents including user credentials, customer data, and financial records through time-based Boolean inference attacks...

GHSA-P864-FQGV-92Q4 OpenSTAManager has a Time-Based Blind SQL Injection in Article Pricing Module

Summary Critical Time-Based Blind SQL Injection vulnerability in the article pricing module of OpenSTAManager v2.9.8 allows authenticated attackers to extract complete database contents including user credentials, customer data, and financial records through time-based Boolean inference attacks...

teknion.com XSS vulnerability

Vulnerable URL: http://www.teknion.com/pricingmodule/filing-storageledger/default.asp?country=canada%22%27%20Style=position:fixed;top:0;left:0;font-size:999px;%20Onmouseenter=confirmOPENBUGBOUNTY%20//=filingstorage=all=ledger=pricing==Accessories=LFA= Details: Description| Value ---|--- Patched:|...

tekniontextiles.ca XSS vulnerability

Vulnerable URL: http://www.tekniontextiles.ca/pricingmodule/filing-storageuniversal/default.asp?country=canada%27%22%20/Style=position:fixed;top:0;left:0;font-size:999px;%20/Onmouseenter=confirm%60OPENBUGBOUNTY%60%20//=filingstorage=all=universal=pricing==Accessories=LFA= Details: Description|...