devcode-it/openstamanager vulnerabilities (Packagist)
18 vulnerabilities.
-
devcode-it/openstamanagerPackagist OpenSTAManager has HTML Injection in modules/utenti/edit.php 3.5 Low -
devcode-it/openstamanagerPackagist OpenSTAManager contains an arbitrary file upload vulnerability in its module update functionality 7.2 High -
devcode-it/openstamanagerPackagist OpenSTAManager has a SQL Injection via righe Parameter in confronta_righe Modals 8.8 High -
devcode-it/openstamanagerPackagist OpenSTAManager: SQL Injection via Aggiornamenti Module 8.8 High -
devcode-it/openstamanagerPackagist OpenSTAManager: Remote Code Execution via Insecure Deserialization in OAuth2 7.2 High -
devcode-it/openstamanagerPackagist OpenSTAManager: Time-Based Blind SQL Injection via `options[stato]` Parameter 8.8 High -
devcode-it/openstamanagerPackagist Unauthenticated privilege escalation in OpenSTAManager via modules/utenti/actions.php 9.8 Critical -
devcode-it/openstamanagerPackagist OpenSTAManager affected by reflected XSS in modifica_iva.php via righe parameter 5.1 Medium -
devcode-it/openstamanagerPackagist OpenSTAManager has a Time-Based Blind SQL Injection in Article Pricing Module 8.7 High -
devcode-it/openstamanagerPackagist OpenSTAManager has a Time-Based Blind SQL Injection with Amplified Denial of Service 8.7 High -
devcode-it/openstamanagerPackagist OpenSTAManager has an SQL Injection vulnerability in the Scadenzario bulk operations module 8.7 High -
devcode-it/openstamanagerPackagist OpenSTAManager has an SQL Injection in Scadenzario Print Template 8.7 High -
devcode-it/openstamanagerPackagist OpenSTAManager has an SQL Injection in the Prima Nota module 8.7 High -
devcode-it/openstamanagerPackagist OpenSTAManager has a SQL Injection in ajax_select.php (componenti endpoint) 8.7 High -
devcode-it/openstamanagerPackagist OpenSTAManager has an OS Command Injection in P7M File Processing 9.4 Critical -
devcode-it/openstamanagerPackagist OpenSTAManager has an SQL Injection in the Stampe Module 8.7 High -
devcode-it/openstamanagerPackagist OpenSTAManager has a SQL Injection in ajax_complete.php (get_sedi endpoint) 8.7 High -
devcode-it/openstamanagerPackagist OpenSTAManager has an authenticated SQL Injection vulnerability in API via 'display' parameter 8.8 High