A SQL injection vulnerability has been identified in STER

# check-ster-cve-2026-25606.ps1

# Purpose: determine whether an installed STER instance appears vulnerable to CVE-2026-25606

# Logic: versions earlier than 9.5 are VULNERABLE; 9.5 or later are PATCHED

# Exit codes: 0=PATCHED, 1=VULNERABLE, 2=UNKNOWN


[CmdletBinding()]
param(
    [string]$Path
)

function Normalize-Version {
    param([string]$Value)
    if ([string]::IsNullOrWhiteSpace($Value)) { return $null }
    $m = [regex]::Match($Value, '(\d+)(?:\.(\d+))?(?:\.(\d+))?(?:\.(\d+))?')
    if (-not $m.Success) { return $null }
    $parts = @()
    for ($i = 1; $i -le 4; $i++) {
        if ($m.Groups[$i].Success) { $parts += [int]$m.Groups[$i].Value } else { $parts += 0 }
    }
    return [version]::new($parts[0], $parts[1], $parts[2], $parts[3])
}

function Get-RegistrySterVersions {
    $roots = @(
        'HKLM:\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\*',
        'HKLM:\SOFTWARE\WOW6432Node\Microsoft\Windows\CurrentVersion\Uninstall\*',
        'HKCU:\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\*'
    )

    $results = @()
    foreach ($root in $roots) {
        try {
            $items = Get-ItemProperty -Path $root -ErrorAction SilentlyContinue |
                Where-Object { $_.DisplayName -match '(^|\s)STER(\s|$)' -or $_.Publisher -match 'Centralny Instytut Ochrony Pracy|CIOP' }
            foreach ($item in $items) {
                $ver = Normalize-Version $item.DisplayVersion
                $results += [pscustomobject]@{
                    Source = 'Registry'
                    Name   = $item.DisplayName
                    Path   = $item.InstallLocation
                    Raw    = $item.DisplayVersion
                    Ver    = $ver
                }
            }
        } catch {}
    }
    return $results
}

function Get-FileSterVersions {
    param([string]$BasePath)

    if ([string]::IsNullOrWhiteSpace($BasePath) -or -not (Test-Path -LiteralPath $BasePath)) {
        return @()
    }

    $results = @()
    $targets = Get-ChildItem -LiteralPath $BasePath -Recurse -File -ErrorAction SilentlyContinue |
        Where-Object {
            $_.Name -match 'STER|SterWeb' -or
            $_.VersionInfo.ProductName -match 'STER|SterWeb' -or
            $_.VersionInfo.CompanyName -match 'Centralny Instytut Ochrony Pracy|CIOP'
        }

    foreach ($file in $targets) {
        $raw = $file.VersionInfo.ProductVersion
        if ([string]::IsNullOrWhiteSpace($raw)) { $raw = $file.VersionInfo.FileVersion }
        $ver = Normalize-Version $raw
        $results += [pscustomobject]@{
            Source = 'File'
            Name   = $file.Name
            Path   = $file.FullName
            Raw    = $raw
            Ver    = $ver
        }
    }

    return $results
}

$patchedFloor = [version]'9.5.0.0'
$findings = @()
$findings += Get-RegistrySterVersions
if ($Path) { $findings += Get-FileSterVersions -BasePath $Path }

# De-duplicate roughly by path+raw version

$findings = $findings | Sort-Object Source, Path, Raw -Unique

if (-not $findings -or $findings.Count -eq 0) {
    Write-Output 'UNKNOWN - No STER installation evidence found in registry or provided path.'
    exit 2
}

$valid = $findings | Where-Object { $_.Ver -ne $null }
if (-not $valid -or $valid.Count -eq 0) {
    Write-Output 'UNKNOWN - STER found, but version could not be parsed.'
    $findings | ForEach-Object { Write-Output ("SOURCE={0} NAME={1} PATH={2} RAW={3}" -f $_.Source, $_.Name, $_.Path, $_.Raw) }
    exit 2
}

# Use the highest discovered version as the best indicator; if any clearly vulnerable instance is present, flag it.

$vulnHits = $valid | Where-Object { $_.Ver -lt $patchedFloor }
if ($vulnHits.Count -gt 0) {
    Write-Output 'VULNERABLE - Found STER version earlier than 9.5.'
    $vulnHits | ForEach-Object { Write-Output ("SOURCE={0} NAME={1} PATH={2} VERSION={3}" -f $_.Source, $_.Name, $_.Path, $_.Ver) }
    exit 1
}

$patchedHits = $valid | Where-Object { $_.Ver -ge $patchedFloor }
if ($patchedHits.Count -gt 0) {
    Write-Output 'PATCHED - Found STER version 9.5 or later.'
    $patchedHits | ForEach-Object { Write-Output ("SOURCE={0} NAME={1} PATH={2} VERSION={3}" -f $_.Source, $_.Name, $_.Path, $_.Ver) }
    exit 0
}

Write-Output 'UNKNOWN - STER evidence found, but patch status could not be determined confidently.'
$findings | ForEach-Object { Write-Output ("SOURCE={0} NAME={1} PATH={2} RAW={3}" -f $_.Source, $_.Name, $_.Path, $_.Raw) }
exit 2