CVE Search Engine - Security Vulnerabilities and Exploits Search Tool

show all

5 matches found

NVD•added 2022/12/02 8:15 p.m.•21 views

CVE-2022-44945

Rukovoditel v3.2.1 was discovered to contain a SQL injection vulnerability via the headingfieldid parameter...

9.8CVSS0.00935EPSS

SaveExploits1References1

Prion•added 2022/12/02 8:15 p.m.•27 views

Sql injection

Rukovoditel v3.2.1 was discovered to contain a SQL injection vulnerability via the headingfieldid parameter...

7.5CVSS9.8AI score0.00935EPSS

SaveExploits1References2Affected Software1

Cvelist•added 2022/12/02 12:00 a.m.•35 views

CVE-2022-44945

Rukovoditel v3.2.1 was discovered to contain a SQL injection vulnerability via the headingfieldid parameter...

10AI score0.00935EPSS

SaveExploits1References1

Rapid7 Vulnerability Database (full)•added 2022/12/02 12:00 a.m.•4 views

CVE-2022-44945: Improper Neutralization of Special Elements used in an SQL Command

Rukovoditel v3.2.1 was discovered to contain a SQL injection vulnerability via the headingfieldid parameter...

9.8CVSS5.8AI score0.00935EPSS

SaveExploits1References4

Rapid7 Vulnerability Database (full)•added 2021/08/17 12:00 a.m.•4 views

CVE-2020-13588: Improper Neutralization of Special Elements used in an SQL Command

An exploitable SQL injection vulnerability exists in the ‘entities/fields’ page of the Rukovoditel Project Management App 2.7.2. The headingfieldid parameter in ‘‘entities/fields’ page is vulnerable to authenticated SQL injection. An attacker can make authenticated HTTP requests to trigger this...

8.8CVSS6AI score0.00968EPSS

SaveExploits1References3

Rows per page

Query Builder

Family

Bulletin Type

Min CVSS Score

Date

Order by