Vulnerabilities in Rukovoditel
5 resultsCVE-2020-13590MEDIUMMultiple exploitable SQL injection vulnerabilities exist in the 'entities/fields' page of the Rukovoditel Project Management App 2.7.2. A spEPSS 0.8%CVE-2023-53913MEDIUMRukovoditel 3.3.1 CSV Injection via User Account ExportEPSS 0.6%CVE-2026-31845CRITICALA reflected cross-site scripting (XSS) vulnerability exists in Rukovoditel CRM version 3.6.4 and earlier in the Zadarma telephony API endpoiEPSS 0.5%CVE-2023-53898MEDIUMRukovoditel 3.4.1 Multiple Stored Cross-Site Scripting via ConfigurationEPSS 0.2%CVE-2023-53897MEDIUMRukovoditel 3.4.1 Multiple Stored Cross-Site Scripting via CommentsEPSS 0.2%