PT-2026-30286 · Unknown · Openstamanager
Ormzro
·
Published
2026-04-03
·
Updated
2026-04-07
·
CVE-2026-35470
CVSS v3.1
8.8
High
| Vector | AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H |
Name of the Vulnerable Software and Affected Versions
OpenSTAManager versions prior to 2.10.2
Description
OpenSTAManager, prior to version 2.10.2, contains an SQL Injection vulnerability in the
confronta righe.php files across different modules. The righe parameter, received via the $ GET['righe'] request, is directly concatenated into an SQL query without proper sanitization, parameterization, or validation. This allows an authenticated attacker to inject arbitrary SQL statements, potentially extracting sensitive data such as user credentials, customer information, invoice data, and other stored data. The vulnerability exists in six files: modules/fatture/modals/confronta righe.php, modules/interventi/modals/confronta righe.php, modules/preventivi/modals/confronta righe.php, modules/ordini/modals/confronta righe.php, modules/ddt/modals/confronta righe.php, and modules/contratti/modals/confronta righe.php. Exploitation involves crafting malicious HTTP GET requests to the confronta righe.php endpoint, manipulating the righe parameter to execute SQL queries. Successful exploitation could lead to confidentiality, integrity, and availability compromise of the database.Recommendations
Apply parameterized statements with
prepare() to the righe parameter in all six affected files: modules/fatture/modals/confronta righe.php, modules/interventi/modals/confronta righe.php, modules/preventivi/modals/confronta righe.php, modules/ordini/modals/confronta righe.php, modules/ddt/modals/confronta righe.php, and modules/contratti/modals/confronta righe.php.Exploit
Fix
SQL injection
Found an issue in the description? Have something to add? Feel free to write us 👾
Weakness Enumeration
Related Identifiers
Affected Products
Openstamanager