PT-2026-5968 · Unknown · Openstamanager

Published 2026-02-03 · Updated 2026-02-18 · CVE-2025-69213

Positive Technologies (AI Summary)

CVSS v3.1

8.8

High

Base vector

AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions OpenSTAManager versions prior to 2.9.8

Description OpenSTAManager is a management software for technical assistance and invoicing. A SQL Injection issue exists in version 2.9.8 and earlier when handling the get sedi operation through the /ajax complete.php API endpoint. An authenticated attacker can inject malicious SQL code through the idanagrafica parameter, potentially gaining unauthorized access to the database.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

SQL injection

Weakness Enumeration

CWE-89

Related Identifiers

CVE-2025-69213

GHSA-W995-FF8H-RPPG

Affected Products

Openstamanager

References · 15

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2025/69xxx/CVE-2025-69213.json · Exploit
• https://github.com/devcode-it/openstamanager/security/advisories/GHSA-w995-ff8h-rppg · Vendor Advisory
• https://osv.dev/vulnerability/GHSA-w995-ff8h-rppg · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2025-69213 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2025-69213 · Security Note
• https://github.com/devcode-it/openstamanager · Note
• https://reddit.com/r/VulnMatter/comments/1qvcq63/resumen_diario_de_vulnerabilidades_04022026 · Reddit Post
• https://reddit.com/r/VulnMatter/comments/1qvcy3d/resumen_diario_de_vulnerabilidades_04022026 · Reddit Post
• https://reddit.com/r/VulnMatter/comments/1qvcre0/resumen_diario_de_vulnerabilidades_04022026 · Reddit Post
• https://twitter.com/VulmonFeeds/status/2019152434006794251 · Twitter Post
• https://reddit.com/r/VulnMatter/comments/1qvcw0u/resumen_diario_de_vulnerabilidades_04022026 · Reddit Post
• https://reddit.com/r/VulnMatter/comments/1qvcxbd/resumen_diario_de_vulnerabilidades_04022026 · Reddit Post
• https://reddit.com/r/VulnMatter/comments/1qvcyij/resumen_diario_de_vulnerabilidades_04022026 · Reddit Post
• https://reddit.com/r/VulnMatter/comments/1qvczeq/resumen_diario_de_vulnerabilidades_04022026 · Reddit Post
• https://t.me/cveNotify/152325 · Telegram Post