Veille CVE

Recherche « Openstamanager Open STA Manager »

2 CVE

  1. CVE-2018-25421 6.5 Moyenne

    Openstamanager Open STA Manager

    Open STA Manager 2.3 contains a path traversal vulnerability that allows authenticated users to download arbitrary files by manipulating the file parameter. Attackers can send GET requests to modules/backup/actions.php with op=getfile and traverse directories using ../ sequences to access sensitive system files.

  2. CVE-2026-38751 7.2 Élevée

    Devcode openstamanager

    OpenSTAManager version 2.10 and earlier contains an arbitrary file upload vulnerability in the module update functionality (modules/aggiornamenti/upload_modules.php)