CVE-2022-44945

CVE-2022-44945 affects Rukovoditel v3.2.1 with a SQL injection via the heading_field_id parameter. Root cause: insufficient input validation allowing arbitrary SQL execution. Impact (as CVSS 3.1): Confidentiality, Integrity, and Availability at High. An exploit PoC is indicated in the related dat...

CVE-2022-44945

Rukovoditel v3.2.1 was discovered to contain a SQL injection vulnerability via the headingfieldid parameter...