Skip to content
OpenAdvisories

Vendor

devcode-it

16 known vulnerabilities.

Products

openstamanager 16
All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • Critical 9.8
    CVE-2026-27012

    Unauthenticated privilege escalation in OpenSTAManager via modules/utenti/actions.php

    OpenSTAManager is an open source management software for technical assistance and invoicing. In 2.9.8 and earlier, a privilege escalation and authentication bypass vulnerability in OpenSTAManager allows any attacker to arbitrarily change a user's group (idgru…

    devcode-it openstamanager devcode-it/openstamanager Packagist
  • Critical 9.4
    CVE-2025-69212 Public exploit

    OpenSTAManager has an OS Command Injection in P7M File Processing

    OpenSTAManager is an open source management software for technical assistance and invoicing. In 2.9.8 and earlier, a critical OS Command Injection vulnerability exists in the P7M (signed XML) file decoding functionality. An authenticated attacker can upload a…

    devcode-it openstamanager devcode-it/openstamanager Packagist