CVE-2025-65103 | devcode-it openstamanager up to 2.9.4 API display sql injection

November 19, 2025 Yanac

A vulnerability was found in devcode-it openstamanager up to 2.9.4 and classified as critical. This affects an unknown function of the component API. Executing manipulation of the argument display can lead to sql injection.

This vulnerability is tracked as CVE-2025-65103. The attack can be launched remotely. No exploit exists.

It is suggested to upgrade the affected component.VulDB Recent EntriesRead More