Rukovoditel

Rukovoditel

52 Schwachstellen gefunden.

Hinweis: Diese Liste kann unvollständig sein. Daten werden ohne Gewähr im Ursprungsformat bereitgestellt.
5.4

CVE-2022-43167

Exploit
  • EPSS 5.92%
  • Veröffentlicht 28.10.2022 17:15:27
  • Zuletzt bearbeitet 08.05.2025 20:15:25

A stored cross-site scripting (XSS) vulnerability in the Users Alerts feature (/index.php?module=users_alerts/users_alerts) of Rukovoditel v3.2.1 allows authenticated attackers to execute arbitrary web scripts or HTML via a crafted payload injected i...

5.4

CVE-2022-43166

Exploit
  • EPSS 4.46%
  • Veröffentlicht 28.10.2022 17:15:27
  • Zuletzt bearbeitet 08.05.2025 20:15:25

A stored cross-site scripting (XSS) vulnerability in the Global Entities feature (/index.php?module=entities/entities) of Rukovoditel v3.2.1 allows authenticated attackers to execute arbitrary web scripts or HTML via a crafted payload injected into t...

5.4

CVE-2022-43165

Exploit
  • EPSS 4.49%
  • Veröffentlicht 28.10.2022 17:15:27
  • Zuletzt bearbeitet 08.05.2025 20:15:25

A stored cross-site scripting (XSS) vulnerability in the Global Variables feature (/index.php?module=global_vars/vars) of Rukovoditel v3.2.1 allows authenticated attackers to execute arbitrary web scripts or HTML via a crafted payload injected into t...

5.4

CVE-2022-43164

Exploit
  • EPSS 5.97%
  • Veröffentlicht 28.10.2022 17:15:26
  • Zuletzt bearbeitet 08.05.2025 20:15:24

A stored cross-site scripting (XSS) vulnerability in the Global Lists feature (/index.php?module=global_lists/lists) of Rukovoditel v3.2.1 allows authenticated attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the...

5.4

CVE-2022-43185

Exploit
  • EPSS 4.79%
  • Veröffentlicht 19.10.2022 14:15:10
  • Zuletzt bearbeitet 08.05.2025 20:15:26

A stored cross-site scripting (XSS) vulnerability in the Configuration/Holidays module of Rukovoditel v3.2.1 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the Name parameter.

7.2

CVE-2020-13590

Exploit
  • EPSS 1.05%
  • Veröffentlicht 18.04.2022 17:15:12
  • Zuletzt bearbeitet 21.11.2024 05:01:34

Multiple exploitable SQL injection vulnerabilities exist in the 'entities/fields' page of the Rukovoditel Project Management App 2.7.2. A specially crafted HTTP request can lead to SQL injection. An attacker can make authenticated HTTP requests to tr...

5.4

CVE-2020-18470

Exploit
  • EPSS 0.14%
  • Veröffentlicht 26.08.2021 18:15:07
  • Zuletzt bearbeitet 21.11.2024 05:08:38

Stored cross-site scripting (XSS) vulnerability in the Name of application field found in the General Configuration page in Rukovoditel 2.4.1 allows remote attackers to inject arbitrary web script or HTML via a crafted website name by doing an authen...

5.4

CVE-2020-18469

Exploit
  • EPSS 0.11%
  • Veröffentlicht 26.08.2021 18:15:07
  • Zuletzt bearbeitet 21.11.2024 05:08:38

Stored cross-site scripting (XSS) vulnerability in the Copyright Text field found in the Application page under the Configuration menu in Rukovoditel 2.4.1 allows remote attackers to inject arbitrary web script or HTML via a crafted website name by d...

8.8

CVE-2020-13589

Exploit
  • EPSS 0.78%
  • Veröffentlicht 17.08.2021 20:15:07
  • Zuletzt bearbeitet 21.11.2024 05:01:33

An exploitable SQL injection vulnerability exists in the ‘entities/fields’ page of the Rukovoditel Project Management App 2.7.2. The entities_id parameter in the 'entities/fields page (mulitple_edit or copy_selected or export function) is vulnerable ...

8.8

CVE-2020-13588

Exploit
  • EPSS 0.78%
  • Veröffentlicht 17.08.2021 20:15:07
  • Zuletzt bearbeitet 21.11.2024 05:01:33

An exploitable SQL injection vulnerability exists in the ‘entities/fields’ page of the Rukovoditel Project Management App 2.7.2. The heading_field_id parameter in ‘‘entities/fields’ page is vulnerable to authenticated SQL injection. An attacker can m...