Openstamanager (Devcode) - vulnerabilities (CVEs)
18 CVEs, 0 in the last 30 days, 96 known versions, newest CVE from 2026-05-30. Vendor: Devcode.
CVEs of Openstamanager
- CVE-2018-25421 - CVSS 7.1 (high), 2026-05-30: Open STA Manager 2.3 contains a path traversal vulnerability that allows authenticated users to download arbitrary files by manipulating the file parameter.…
- CVE-2026-38751 - CVSS 7.2 (high), 2026-05-04: OpenSTAManager version 2.10 and earlier contains an arbitrary file upload vulnerability in the module update functionality…
- CVE-2026-35470 - CVSS 8.8 (high), 2026-04-06: OpenSTAManager is an open source management software for technical assistance and invoicing. Prior to 2.10.2, confronta_righe.php files across different…
- CVE-2026-35168 - CVSS 8.8 (high), 2026-04-02: OpenSTAManager is an open source management software for technical assistance and invoicing. Prior to version 2.10.2, the Aggiornamenti (Updates) module in…
- CVE-2026-29782 - CVSS 7.2 (high), 2026-04-02: OpenSTAManager is an open source management software for technical assistance and invoicing. Prior to version 2.10.2, the oauth2.php file in OpenSTAManager is…
- CVE-2026-28805 - CVSS 8.8 (high), 2026-04-02: OpenSTAManager is an open source management software for technical assistance and invoicing. Prior to version 2.10.2, multiple AJAX select handlers in…
- CVE-2026-27012 - CVSS 9.8 (critical), 2026-03-03: OpenSTAManager is an open source management software for technical assistance and invoicing. In 2.9.8 and earlier, a privilege escalation and authentication…
- CVE-2026-24415 - CVSS 6.1 (medium), 2026-03-03: OpenSTAManager is an open source management software for technical assistance and invoicing. OpenSTAManager v2.9.8 and earlier contains Reflected XSS…
- CVE-2026-24418 - CVSS 8.7 (high), 2026-02-06: OpenSTAManager is an open source management software for technical assistance and invoicing. OpenSTAManager v2.9.8 and earlier contain a critical Error-Based…
- CVE-2026-24417 - CVSS 8.7 (high), 2026-02-06: OpenSTAManager is an open source management software for technical assistance and invoicing. OpenSTAManager v2.9.8 and earlier contain a critical Time-Based…
- CVE-2026-24416 - CVSS 8.7 (high), 2026-02-06: OpenSTAManager is an open source management software for technical assistance and invoicing. OpenSTAManager v2.9.8 and earlier contain a critical Time-Based…
- CVE-2025-69214 - CVSS 8.8 (high), 2026-02-06: OpenSTAManager is an open source management software for technical assistance and invoicing. In 2.9.8 and earlier, an SQL Injection vulnerability exists in…
- CVE-2025-69212 - CVSS 9.4 (critical), 2026-02-06: OpenSTAManager is an open source management software for technical assistance and invoicing. In 2.9.8 and earlier, a critical OS Command Injection…
- CVE-2025-69216 - CVSS 8.7 (high), 2026-02-06: OpenSTAManager is an open source management software for technical assistance and invoicing. In 2.9.8 and earlier, an authenticated SQL injection…
- CVE-2026-24419 - CVSS 8.7 (high), 2026-02-06: OpenSTAManager is an open source management software for technical assistance and invoicing. OpenSTAManager v2.9.8 and earlier contain a critical Error-Based…
- CVE-2025-69215 - CVSS 8.8 (high), 2026-02-04: OpenSTAManager is an open source management software for technical assistance and invoicing. In version 2.9.8 and prior, there is a SQL Injection…
- CVE-2025-69213 - CVSS 8.8 (high), 2026-02-04: OpenSTAManager is an open source management software for technical assistance and invoicing. In version 2.9.8 and prior, a SQL Injection vulnerability exists…
- CVE-2023-38878 - CVSS 6.1 (medium), 2023-09-11: A reflected cross-site scripting (XSS) vulnerability in DevCode OpenSTAManager versions 2.4.24 to 2.4.47 may allow a remote attacker to execute arbitrary…
