Skip to content
Threat Feed
Subscribe

Tag

Openstamanager

2 briefs RSS
high advisory

OpenSTAManager Time-Based Blind SQL Injection Vulnerability

OpenSTAManager versions before 2.10.2 are susceptible to time-based blind SQL injection via the 'options[stato]' GET parameter, allowing authenticated attackers to extract sensitive database information.

openstamanager sqli cve-2026-28805
2r 1t
critical advisory

OpenSTAManager Unauthenticated Remote Code Execution via Insecure Deserialization

OpenSTAManager is vulnerable to remote code execution due to insecure deserialization in the OAuth2 component, allowing unauthenticated attackers to execute arbitrary commands by injecting a malicious serialized object into the `zz_oauth2` table.

PoC openstamanager rce deserialization sqli webserver
2r 2t 1c updated