İçeriğe atla
Noroxi

Rukovoditel kayıtları

rukovoditel üreticisine ait 52 yayımlanmış kayıt.

Araştırmacı profili

KEV’e giren
0 · %0
Silahlaştırılmış
0 · %0
Pre-auth RCE
2
Düzeltme kaydı olan
%0
Yayından KEV’e ortanca
KEV’e giren kayıt yok

Yıllara göre kayıt

  1. 19
  2. 20
  3. 21
  4. 22
  5. 23
  6. 24
  7. 25

Çubuk: toplam · koyu kısım: CISA KEV.

Tekrar eden sınıflar

Bu üreticide en sık görülen zafiyet sınıfları: nereye bakmalı.

CWE

Saldırı profili

Tüm kayıtlar

52 kayıt
  • CVE-2020-11819
    47Planlayın

    In Rukovoditel 2.5.2, an attacker may inject an arbitrary .php file location instead of a language file and thus achieve command execution.

    KritikCVSS 9,8Kavram kanıtıEPSS %26

    rukovoditel · rukovoditel16 Nis 2020

  • CVE-2020-11815
    40Planlayın

    In Rukovoditel 2.5.2, attackers can upload arbitrary file to the server by just changing the content-type value.

    KritikCVSS 9,8İstismar yokEPSS %2

    rukovoditel · rukovoditel16 Nis 2020

  • CVE-2020-11817
    40Planlayın

    In Rukovoditel V2.5.2, attackers can upload an arbitrary file to the server just changing the the content-type value.

    KritikCVSS 9,8İstismar yokEPSS %1

    rukovoditel · rukovoditel27 Nis 2020

  • CVE-2020-11816
    40Planlayın

    Rukovoditel 2.5.2 is affected by a SQL injection vulnerability because of improper handling of the reports_id (POST) parameter.

    KritikCVSS 9,8İstismar yokEPSS %1

    rukovoditel · rukovoditel16 Nis 2020

  • CVE-2020-11820
    40Planlayın

    Rukovoditel 2.5.2 is affected by a SQL injection vulnerability because of improper handling of the entities_id parameter.

    KritikCVSS 9,8İstismar yokEPSS %1

    rukovoditel · rukovoditel16 Nis 2020

  • CVE-2022-48175
    40Planlayın

    Rukovoditel v3.2.1 was discovered to contain a remote code execution (RCE) vulnerability in the component /rukovoditel/index.php?module=dash

    KritikCVSS 9,8İstismar yokEPSS %1

    rukovoditel · rukovoditel30 Oca 2023

  • CVE-2020-11812
    40Planlayın

    Rukovoditel 2.5.2 is affected by a SQL injection vulnerability because of improper handling of the filters[0][value] or filters[1][value] pa

    KritikCVSS 9,8İstismar yokEPSS %1

    rukovoditel · rukovoditel16 Nis 2020

  • CVE-2022-44945
    39İzleyin

    Rukovoditel v3.2.1 was discovered to contain a SQL injection vulnerability via the heading_field_id parameter.

    KritikCVSS 9,8İstismar yokEPSS %0

    rukovoditel · rukovoditel2 Ara 2022

  • CVE-2022-43168
    39İzleyin

    Rukovoditel v3.2.1 was discovered to contain a SQL injection vulnerability via the reports_id parameter.

    KritikCVSS 9,8İstismar yokEPSS %0

    rukovoditel · rukovoditel28 Eki 2022

  • CVE-2018-20166
    37İzleyin

    A file-upload vulnerability exists in Rukovoditel 2.3.1.

    YüksekCVSS 8,8Kavram kanıtıEPSS %7

    rukovoditel · rukovoditel2 Oca 2019

  • CVE-2020-13587
    35İzleyin

    An exploitable SQL injection vulnerability exists in the "forms_fields_rules/rules" page of the Rukovoditel Project Management App 2.7.2.

    YüksekCVSS 8,8İstismar yokEPSS %1

    rukovoditel · rukovoditel9 Nis 2021

  • CVE-2020-13591
    35İzleyin

    An exploitable SQL injection vulnerability exists in the "access_rules/rules_form" page of the Rukovoditel Project Management App 2.7.2.

    YüksekCVSS 8,8İstismar yokEPSS %1

    rukovoditel · rukovoditel9 Nis 2021

  • CVE-2020-13592
    35İzleyin

    An exploitable SQL injection vulnerability exists in "global_lists/choices" page of the Rukovoditel Project Management App 2.7.2.

    YüksekCVSS 8,8İstismar yokEPSS %1

    rukovoditel · rukovoditel9 Nis 2021

  • CVE-2020-13588
    35İzleyin

    An exploitable SQL injection vulnerability exists in the ‘entities/fields’ page of the Rukovoditel Project Management App 2.7.2.

    YüksekCVSS 8,8İstismar yokEPSS %0

    rukovoditel · rukovoditel17 Ağu 2021

  • CVE-2020-13589
    35İzleyin

    An exploitable SQL injection vulnerability exists in the ‘entities/fields’ page of the Rukovoditel Project Management App 2.7.2.

    YüksekCVSS 8,8İstismar yokEPSS %0

    rukovoditel · rukovoditel17 Ağu 2021

  • CVE-2022-43288
    35İzleyin

    Rukovoditel v3.2.1 was discovered to contain a SQL injection vulnerability via the order_by parameter at /rukovoditel/index.php?module=logs/

    YüksekCVSS 8,8İstismar yokEPSS %0

    rukovoditel · rukovoditel14 Kas 2022

  • CVE-2020-11818
    35İzleyin

    In Rukovoditel 2.5.2 has a form_session_token value to prevent CSRF attacks.

    YüksekCVSS 8,8İstismar yokEPSS %0

    rukovoditel · rukovoditel16 Nis 2020

  • CVE-2021-30224
    35İzleyin

    Cross Site Request Forgery (CSRF) in Rukovoditel v2.8.3 allows attackers to create an admin user with an arbitrary credentials.

    YüksekCVSS 8,8İstismar yokEPSS %0

    rukovoditel · rukovoditel29 Nis 2021

  • CVE-2022-45020
    35İzleyin

    Rukovoditel v3.2.1 was discovered to contain a DOM-based cross-site scripting (XSS) vulnerability in the component /rukovoditel/index.php?mo

    YüksekCVSS 8,8İstismar yokEPSS %0

    rukovoditel · rukovoditel5 Ara 2022

  • CVE-2020-13590
    28İzleyin

    Multiple exploitable SQL injection vulnerabilities exist in the 'entities/fields' page of the Rukovoditel Project Management App 2.7.2.

    YüksekCVSS 7,2İstismar yokEPSS %0

    rukovoditel · rukovoditel18 Nis 2022

  • CVE-2024-34469
    28İzleyin

    Rukovoditel before 3.5.3 allows XSS via user_photo to index.php?module=users/registration&action=save.

    YüksekCVSS 7,1Kavram kanıtıEPSS %0

    rukovoditel · rukovoditel4 May 2024

  • CVE-2019-7400
    26İzleyin

    Rukovoditel before 2.4.1 allows XSS.

    OrtaCVSS 6,1Kavram kanıtıEPSS %5

    rukovoditel · rukovoditel5 Şub 2019

  • CVE-2019-7541
    25İzleyin

    Rukovoditel through 2.4.1 allows XSS via a URL that lacks a module=users%2flogin substring.

    OrtaCVSS 6,1Kavram kanıtıEPSS %3

    rukovoditel · rukovoditel7 May 2019

  • CVE-2020-11822
    24İzleyin

    In Rukovoditel 2.5.2, there is a stored XSS vulnerability on the application structure --> user access groups page.

    OrtaCVSS 6,1İstismar yokEPSS %0

    rukovoditel · rukovoditel27 Nis 2020

  • CVE-2023-53913
    24İzleyin

    Rukovoditel 3.3.1 CSV Injection via User Account Export

    OrtaCVSS 6,2İstismar yokEPSS %0

    rukovoditel · rukovoditel17 Ara 2025