CVE-2026-24418

CVE-2026-24418: OpenSTAManager has a SQL Injection vulnerability in the Scadenzario bulk operations module Overview Field| Details ---|--- CVE ID| CVE-2026-24418 Severity| HIGH Advisory| View Advisory Discovered by| Lukasz Rybak Affected Products devcode-it/openstamanager versions: = 2.9.8 CWE...

CVE-2026-24418

CVE-2026-24418 OpenSTAManager = 2.9.8 — Error-Based SQL Injection in Scadenzario Bulk Operations Module Overview Field| Details ---|--- CVE ID| CVE-2026-24418 Severity| HIGH 8.8 CWE| CWE-89: SQL Injection Affected Versions| OpenSTAManager = 2.9.8 Vulnerable Parameter| idrecords POST array...

📄 OpenSTAManager 2.9.8 SQL Injection

OpenSTAManager versions 2.9.8 and below suffer from a remote SQL injection vulnerability in the Scadenzario bulk operations module. CVE-2026-24418: OpenSTAManager has a SQL Injection vulnerability in the Scadenzario bulk operations module Overview | Field | Details | |---|---| | CVE ID |...

Exploit for SQL Injection in Devcode Openstamanager

CVE-2026-24418: OpenSTAManager has a SQL Injection vulnerabili...

PT-2026-6774

Name of the Vulnerable Software and Affected Versions OpenSTAManager versions 2.9.8 and earlier Description OpenSTAManager contains a critical Error-Based SQL Injection issue within the Scadenzario Payment Schedule module’s bulk operations handler. The application does not properly validate that...