PT-2022-27348

Name of the Vulnerable Software and Affected Versions Rukovoditel version 3.2.1 Description A stored cross-site scripting XSS issue was found in the Add New Field function at "/index.php?module=entities/fields&entities id=24". This allows attackers to execute arbitrary web scripts or HTML via a...

CVE-2020-11820

Rukovoditel 2.5.2 is affected by a SQL injection vulnerability because of improper handling of the entitiesid parameter...

PT-2020-12869

Name of the Vulnerable Software and Affected Versions Rukovoditel version 2.5.2 Description The issue arises from improper handling of the entities id parameter, leading to a SQL injection vulnerability. Recommendations For Rukovoditel version 2.5.2, avoid using the entities id parameter in...