devcode-it vulnerabilities

CVEs per yearBy the year they were published

1. 20251
2. 202615

Newest CVEs

• CVE-2026-35470

  OpenSTAManager has a SQL Injection via righe Parameter in confronta_righe Modals

  devcode-it · openstamanager

  High8.8
• CVE-2026-35168

  OpenSTAManager: SQL Injection via Aggiornamenti Module

  devcode-it · openstamanager

  High8.8
• CVE-2026-28805

  OpenSTAManager: Time-Based Blind SQL Injection via `options[stato]` Parameter

  devcode-it · openstamanager

  High8.8
• CVE-2026-29782

  OpenSTAManager: Remote Code Execution via Insecure Deserialization in OAuth2

  devcode-it · openstamanager

  High7.2
• CVE-2026-27012

  Unauthenticated privilege escalation in OpenSTAManager via modules/utenti/actions.php

  devcode-it · openstamanager

  Critical9.8
• CVE-2026-24415

  OpenSTAManager affected by reflected XSS in modifica_iva.php via righe parameter

  devcode-it · openstamanager

  Medium5.1
• CVE-2025-69212

  OpenSTAManager has an OS Command Injection in P7M File Processing

  devcode-it · openstamanager

  Critical9.4
• CVE-2025-69214

  OpenSTAManager has a SQL Injection in ajax_select.php (componenti endpoint)

  devcode-it · openstamanager

  High8.7
• CVE-2025-69216

  OpenSTAManager has an SQL Injection in Scadenzario Print Template

  devcode-it · openstamanager

  High8.7
• CVE-2026-24416

  OpenSTAManager has a Time-Based Blind SQL Injection in Article Pricing Module

  devcode-it · openstamanager

  High8.7