Security
فارسی
All products

devcode-it/openstamanager

Composer · Package
18 reports
Vulnerability alerts
Follow
ReportProductEcosystemSeverityFix statusLast updated
OpenSTAManager has a Time-Based Blind SQL Injection with Amplified Denial of ServiceCVE-2026-24417 · GHSA-4HC4-8599-XH2H devcode-it/openstamanager Composer High No fix reported
OpenSTAManager has HTML Injection in modules/utenti/edit.phpCVE-2026-44701 · GHSA-CRX4-7MMQ-J74J devcode-it/openstamanager Composer Low Fix reported
OpenSTAManager contains an arbitrary file upload vulnerability in its module update functionality CVE-2026-38751 · GHSA-RM34-FG4M-39MW devcode-it/openstamanager Composer High No fix reported
OpenSTAManager Affected by Remote Code Execution via Insecure Deserialization in OAuth2CVE-2026-29782 · GHSA-WHV5-4Q2F-Q68G devcode-it/openstamanager Composer High Fix reported
OpenSTAManager has a Time-Based Blind SQL Injection via `options[stato]` ParameterCVE-2026-28805 · GHSA-3GW8-3MG3-JMPC devcode-it/openstamanager Composer High Fix reported
OpenSTAManager has a SQL Injection via righe Parameter in confronta_righe ModalsCVE-2026-35470 · GHSA-MMM5-3G4X-QW39 devcode-it/openstamanager Composer High Fix reported
OpenSTAManager: SQL Injection via Aggiornamenti ModuleCVE-2026-35168 · GHSA-2FR7-CC4F-WH98 devcode-it/openstamanager Composer High Fix reported
OpenSTAManager Affected by XSS in modifica_iva.php via righe parameterCVE-2026-24415 · GHSA-JFGP-G7X7-J25J devcode-it/openstamanager Composer Medium Fix reported
OpenSTAManager affected by unauthenticated privilege escalation via modules/utenti/actions.phpCVE-2026-27012 · GHSA-247V-7CW6-Q57V devcode-it/openstamanager Composer Critical No fix reported
OpenSTAManager has a SQL Injection in ajax_complete.php (get_sedi endpoint)CVE-2025-69213 · GHSA-W995-FF8H-RPPG devcode-it/openstamanager Composer High No fix reported
OpenSTAManager has an OS Command Injection in P7M File ProcessingCVE-2025-69212 · GHSA-25FP-8W8P-MX36 devcode-it/openstamanager Composer Critical No fix reported
OpenSTAManager has a SQL Injection vulnerability in the Scadenzario bulk operations moduleCVE-2026-24418 · GHSA-4XWV-49C8-FVHQ devcode-it/openstamanager Composer High No fix reported
OpenSTAManager has a SQL Injection in ajax_select.php (componenti endpoint)CVE-2025-69214 · GHSA-QJV8-63XQ-GQ8M devcode-it/openstamanager Composer High No fix reported
OpenSTAManager has a SQL Injection in Scadenzario Print TemplateCVE-2025-69216 · GHSA-Q6G3-FV43-M2W6 devcode-it/openstamanager Composer High No fix reported
OpenSTAManager has a SQL Injection in the Prima Nota module CVE-2026-24419 · GHSA-4J2X-JH4M-FQV6 devcode-it/openstamanager Composer High No fix reported
OpenSTAManager has a Time-Based Blind SQL Injection in Article Pricing ModuleCVE-2026-24416 · GHSA-P864-FQGV-92Q4 devcode-it/openstamanager Composer High No fix reported
OpenSTAManager has an SQL Injection in the Stampe ModuleCVE-2025-69215 · GHSA-QX9P-W3VJ-Q24Q devcode-it/openstamanager Composer High No fix reported
OpenSTAManager has Authenticated SQL Injection in API via 'display' parameterCVE-2025-65103 · GHSA-2JM2-2P35-RP3J devcode-it/openstamanager Composer High Fix reported