CVE-2026-28805

{"id": "CVE-2026-28805", "cveTags": [], "metrics": {"ssvcV203": [{"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "ssvcData": {"id": "CVE-2026-28805", "role": "CISA Coordinator", "options": [{"exploitation": "poc"}, {"automatable": "no"}, {"technicalImpact": "total"}], "version": "2.0.3", "timestamp": "2026-04-02T18:30:58.710195Z"}}], "cvssMetricV31": [{"type": "Secondary", "source": "security-advisories@github.com", "cvssData": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 8.8, "attackVector": "NETWORK", "baseSeverity": "HIGH", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "integrityImpact": "HIGH", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "HIGH", "privilegesRequired": "LOW", "confidentialityImpact": "HIGH"}, "impactScore": 5.9, "exploitabilityScore": 2.8}]}, "affected": [{"source": "security-advisories@github.com", "affectedData": [{"vendor": "devcode-it", "product": "openstamanager", "versions": [{"status": "affected", "version": "< 2.10.2"}]}]}], "published": "2026-04-02T14:16:26.400", "references": [{"url": "https://github.com/devcode-it/openstamanager/commit/50b9089c506ba2ca249afb1dfead2af5d42c10e7", "tags": ["Patch"], "source": "security-advisories@github.com"}, {"url": "https://github.com/devcode-it/openstamanager/commit/679c40fa5b3acad4263b537f367c0695ff9666dc", "tags": ["Patch"], "source": "security-advisories@github.com"}, {"url": "https://github.com/devcode-it/openstamanager/releases/tag/v2.10.2", "tags": ["Product", "Release Notes"], "source": "security-advisories@github.com"}, {"url": "https://github.com/devcode-it/openstamanager/security/advisories/GHSA-3gw8-3mg3-jmpc", "tags": ["Exploit", "Mitigation", "Vendor Advisory"], "source": "security-advisories@github.com"}], "vulnStatus": "Analyzed", "weaknesses": [{"type": "Secondary", "source": "security-advisories@github.com", "description": [{"lang": "en", "value": "CWE-89"}]}], "descriptions": [{"lang": "en", "value": "OpenSTAManager is an open source management software for technical assistance and invoicing. Prior to version 2.10.2, multiple AJAX select handlers in OpenSTAManager are vulnerable to Time-Based Blind SQL Injection through the options[stato] GET parameter. The user-supplied value is read from $superselect['stato'] and concatenated directly into SQL WHERE clauses as a bare expression, without any sanitization, parameterization, or allowlist validation. An authenticated attacker can inject arbitrary SQL statements to extract sensitive data from the database, including usernames, password hashes, financial records, and any other information stored in the MySQL database. This issue has been patched in version 2.10.2."}, {"lang": "es", "value": "OpenSTAManager es un software de gesti\u00f3n de c\u00f3digo abierto para asistencia t\u00e9cnica y facturaci\u00f3n. Antes de la versi\u00f3n 2.10.2, m\u00faltiples manejadores de selecci\u00f3n AJAX en OpenSTAManager son vulnerables a inyecci\u00f3n SQL ciega basada en tiempo a trav\u00e9s del par\u00e1metro GET options[stato]. El valor proporcionado por el usuario se lee de $superselect[\u2019stato\u2019] y se concatena directamente en cl\u00e1usulas SQL WHERE como una expresi\u00f3n sin procesar, sin ninguna sanitizaci\u00f3n, parametrizaci\u00f3n o validaci\u00f3n de lista de permitidos. Un atacante autenticado puede inyectar sentencias SQL arbitrarias para extraer datos sensibles de la base de datos, incluyendo nombres de usuario, hashes de contrase\u00f1as, registros financieros y cualquier otra informaci\u00f3n almacenada en la base de datos MySQL. Este problema ha sido parcheado en la versi\u00f3n 2.10.2."}], "lastModified": "2026-10-26T00:10:00.150", "configurations": [{"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:a:devcode:openstamanager:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "37690084-64E6-4E8B-8A92-8B55C8FC1E9F", "versionEndExcluding": "2.10.2"}], "operator": "OR"}]}], "sourceIdentifier": "security-advisories@github.com"}