EUVD-2020-5837

Malware in sbrugna...

EUVD-2020-5834

Malware in sbrugna...

EUVD-2020-5835

Malware in sbrugna...

EUVD-2020-5839

Malware in sbrugna...

CVE-2020-13590

Multiple exploitable SQL injection vulnerabilities exist in the 'entities/fields' page of the Rukovoditel Project Management App 2.7.2. A specially crafted HTTP request can lead to SQL injection. An attacker can make authenticated HTTP requests to trigger these vulnerabilities, this can be done...

CVE-2020-13587

An exploitable SQL injection vulnerability exists in the "formsfieldsrules/rules" page of the Rukovoditel Project Management App 2.7.2. A specially crafted HTTP request can lead to SQL injection. An attacker can make an authenticated HTTP request to trigger this vulnerability, this can be done...

PT-2021-9656 · Unknown · Rukovoditel Project Management App

Name of the Vulnerable Software and Affected Versions: Rukovoditel Project Management App version 2.7.2 Description: A SQL injection vulnerability exists in the "access rules/rules form" page. This can be triggered by a specially crafted HTTP request, allowing an attacker to perform SQL injection...