Rukovoditel vulnerabilities

Products

• Rukovoditel 52

Newest

• rukovoditel crm Rukovoditel CRM Reflected XSS via zd_echo Parameter in Zadarma Telephony API Endpoint CVE-2026-31845 9.3 CriticalApril 11, 2026
• rukovoditel Rukovoditel 3.3.1 CSV Injection via User Account Export CVE-2023-53913 6.2 MediumDecember 17, 2025
• rukovoditel Rukovoditel 3.4.1 Multiple Stored Cross-Site Scripting via Configuration CVE-2023-53898 5.1 MediumDecember 16, 2025
• rukovoditel Rukovoditel 3.4.1 Multiple Stored Cross-Site Scripting via Comments CVE-2023-53897 5.1 MediumDecember 16, 2025
• rukovoditel Rukovoditel before 3.5.3 allows XSS via user_photo to index.php?module=users/registration&action... CVE-2024-34469 Public exploit 7.1 HighMay 4, 2024
• rukovoditel Rukovoditel before 3.5.3 allows XSS via user_photo to My Page. CVE-2024-34468 6.1 MediumMay 4, 2024
• rukovoditel Rukovoditel v3.2.1 was discovered to contain a remote code execution (RCE) vulnerability in the... CVE-2022-48175 9.8 CriticalJanuary 30, 2023
• rukovoditel Rukovoditel v3.2.1 was discovered to contain a DOM-based cross-site scripting (XSS) vulnerability... CVE-2022-45020 8.8 HighDecember 5, 2022
• rukovoditel Rukovoditel v3.2.1 was discovered to contain a stored cross-site scripting (XSS) vulnerability in... CVE-2022-44952 5.4 MediumDecember 2, 2022
• rukovoditel Rukovoditel v3.2.1 was discovered to contain a stored cross-site scripting (XSS) vulnerability in... CVE-2022-44951 5.4 MediumDecember 2, 2022
• rukovoditel Rukovoditel v3.2.1 was discovered to contain a stored cross-site scripting (XSS) vulnerability in... CVE-2022-44950 5.4 MediumDecember 2, 2022
• rukovoditel Rukovoditel v3.2.1 was discovered to contain a stored cross-site scripting (XSS) vulnerability in... CVE-2022-44949 5.4 MediumDecember 2, 2022
• rukovoditel Rukovoditel v3.2.1 was discovered to contain a stored cross-site scripting (XSS) vulnerability in... CVE-2022-44948 5.4 MediumDecember 2, 2022
• rukovoditel Rukovoditel v3.2.1 was discovered to contain a stored cross-site scripting (XSS) vulnerability in... CVE-2022-44947 5.4 MediumDecember 2, 2022
• rukovoditel Rukovoditel v3.2.1 was discovered to contain a stored cross-site scripting (XSS) vulnerability in... CVE-2022-44946 5.4 MediumDecember 2, 2022
• rukovoditel Rukovoditel v3.2.1 was discovered to contain a SQL injection vulnerability via the... CVE-2022-44945 9.8 CriticalDecember 2, 2022
• rukovoditel Rukovoditel v3.2.1 was discovered to contain a stored cross-site scripting (XSS) vulnerability in... CVE-2022-44944 5.4 MediumDecember 2, 2022
• rukovoditel Rukovoditel v3.2.1 was discovered to contain a SQL injection vulnerability via the order_by... CVE-2022-43288 8.8 HighNovember 14, 2022
• rukovoditel A stored cross-site scripting (XSS) vulnerability in the Dashboard Configuration feature (index... CVE-2022-43170 5.4 MediumOctober 28, 2022
• rukovoditel A stored cross-site scripting (XSS) vulnerability in the Users Access Groups feature (/index.php... CVE-2022-43169 5.4 MediumOctober 28, 2022
• rukovoditel Rukovoditel v3.2.1 was discovered to contain a SQL injection vulnerability via the reports_id... CVE-2022-43168 9.8 CriticalOctober 28, 2022
• rukovoditel A stored cross-site scripting (XSS) vulnerability in the Users Alerts feature (/index.php?module... CVE-2022-43167 5.4 MediumOctober 28, 2022
• rukovoditel A stored cross-site scripting (XSS) vulnerability in the Global Entities feature (/index.php... CVE-2022-43166 5.4 MediumOctober 28, 2022
• rukovoditel A stored cross-site scripting (XSS) vulnerability in the Global Variables feature (/index.php... CVE-2022-43165 5.4 MediumOctober 28, 2022
• rukovoditel A stored cross-site scripting (XSS) vulnerability in the Global Lists feature (/index.php?module... CVE-2022-43164 5.4 MediumOctober 28, 2022
• rukovoditel A stored cross-site scripting (XSS) vulnerability in the Configuration/Holidays module of... CVE-2022-43185 5.4 MediumOctober 19, 2022
• rukovoditel project management app, rukovoditel +1 more Multiple exploitable SQL injection vulnerabilities exist in the 'entities/fields' page of the... CVE-2020-13590 5.4 MediumApril 18, 2022
• rukovoditel Stored cross-site scripting (XSS) vulnerability in the Name of application field found in the... CVE-2020-18470 5.4 MediumAugust 26, 2021
• rukovoditel Stored cross-site scripting (XSS) vulnerability in the Copyright Text field found in the... CVE-2020-18469 5.4 MediumAugust 26, 2021
• rukovoditel An exploitable SQL injection vulnerability exists in the ‘entities/fields’ page of the... CVE-2020-13589 5.4 MediumAugust 17, 2021
• rukovoditel An exploitable SQL injection vulnerability exists in the ‘entities/fields’ page of the... CVE-2020-13588 5.4 MediumAugust 17, 2021
• rukovoditel A stored cross site scripting (XSS) vulnerability in the 'Users Alerts' feature of Rukovoditel 2... CVE-2020-35984 5.4 MediumJuly 9, 2021
• rukovoditel A stored cross site scripting (XSS) vulnerability in the 'Global Lists" feature of Rukovoditel 2... CVE-2020-35985 5.4 MediumJuly 9, 2021
• rukovoditel A stored cross site scripting (XSS) vulnerability in the 'Users Access Groups' feature of... CVE-2020-35986 5.4 MediumJuly 9, 2021
• rukovoditel A stored cross site scripting (XSS) vulnerability in the 'Entities List' feature of Rukovoditel 2... CVE-2020-35987 5.4 MediumJuly 9, 2021
• rukovoditel Cross Site Request Forgery (CSRF) in Rukovoditel v2.8.3 allows attackers to create an admin user... CVE-2021-30224 8.8 HighApril 29, 2021
• rukovoditel An exploitable SQL injection vulnerability exists in "global_lists/choices" page of the... CVE-2020-13592 5.4 MediumApril 9, 2021
• rukovoditel An exploitable SQL injection vulnerability exists in the "forms_fields_rules/rules" page of the... CVE-2020-13587 5.4 MediumApril 9, 2021
• rukovoditel An exploitable SQL injection vulnerability exists in the "access_rules/rules_form" page of the... CVE-2020-13591 5.4 MediumApril 9, 2021
• rukovoditel Rukovoditel Project Management app 2.6 is affected by: Cross Site Scripting (XSS). An attacker... CVE-2020-21732 6.1 MediumSeptember 14, 2020
• rukovoditel In Rukovoditel 2.5.2, there is a stored XSS vulnerability on the application structure --> user... CVE-2020-11822 6.1 MediumApril 27, 2020
• rukovoditel In Rukovoditel 2.5.2, users' passwords and usernames are stored in a cookie with URL encoding,... CVE-2020-11821 5.3 MediumApril 27, 2020
• rukovoditel In Rukovoditel V2.5.2, attackers can upload an arbitrary file to the server just changing the the... CVE-2020-11817 9.8 CriticalApril 27, 2020
• rukovoditel In Rukovoditel 2.5.2, an attacker may inject an arbitrary .php file location instead of a... CVE-2020-11819 Public exploit EPSS 26.8% 9.8 CriticalApril 16, 2020
• rukovoditel Rukovoditel 2.5.2 is affected by a SQL injection vulnerability because of improper handling of... CVE-2020-11820 9.8 CriticalApril 16, 2020
• rukovoditel In Rukovoditel 2.5.2 has a form_session_token value to prevent CSRF attacks. This protection... CVE-2020-11818 8.8 HighApril 16, 2020
• rukovoditel In Rukovoditel 2.5.2, attackers can upload arbitrary file to the server by just changing the... CVE-2020-11815 9.8 CriticalApril 16, 2020
• rukovoditel Rukovoditel 2.5.2 is affected by a SQL injection vulnerability because of improper handling of... CVE-2020-11816 9.8 CriticalApril 16, 2020
• rukovoditel Rukovoditel 2.5.2 is affected by a SQL injection vulnerability because of improper handling of... CVE-2020-11812 9.8 CriticalApril 16, 2020
• rukovoditel In Rukovoditel 2.5.2, there is a stored XSS vulnerability on the configuration page via the... CVE-2020-11813 5.4 MediumApril 16, 2020
• Show olderLoading…