CVE-2025-69214
OpenSTAManager has a SQL Injection in ajax_select.php (componenti endpoint)
Summary
OpenSTAManager has a SQL Injection in ajax_select.php (componenti endpoint)
Original description
The description as published by the source.
OpenSTAManager is an open source management software for technical assistance and invoicing. In 2.9.8 and earlier, an SQL Injection vulnerability exists in the ajax_select.php endpoint when handling the componenti operation. An authenticated attacker can inject malicious SQL code through the options[matricola] parameter.
Source: OSV.dev (Open Source Vulnerabilities) NVD GitHub Advisory OSV
References
- advisory github.com
- advisory github.com
- advisory nvd.nist.gov