SQL Injection

Every one of the 12 is a mark on the map. Named now: 1 to 12, most at risk first.

1. Rukovoditel 2.5.2 is affected by a SQL injection vulnerability because of improper handling of the entities_id parameter.CVE-2020-11820Rukovoditel · 1.8% likely

   CWE-89

2. Rukovoditel 2.5.2 is affected by a SQL injection vulnerability because of improper handling of the reports_id (POST) parameter.CVE-2020-11816Rukovoditel · 1.8% likely

   CWE-89

3. Rukovoditel 2.5.2 is affected by a SQL injection vulnerability because of improper handling of the filters[0][value] or filters[1][value] parameter.CVE-2020-11812Rukovoditel · 1.7% likely

   CWE-89

4. An exploitable SQL injection vulnerability exists in "global_lists/choices" page of the Rukovoditel Project Management App 2.7.2. A specially crafted HTTP request can lead to SQL…CVE-2020-13592Rukovoditel · CVSS 5.4 · 1.5% likely

   CWE-89

5. An exploitable SQL injection vulnerability exists in the "access_rules/rules_form" page of the Rukovoditel Project Management App 2.7.2. A specially crafted HTTP request can lead…CVE-2020-13591Rukovoditel · CVSS 5.4 · 1.5% likely

   CWE-89

6. An exploitable SQL injection vulnerability exists in the "forms_fields_rules/rules" page of the Rukovoditel Project Management App 2.7.2. A specially crafted HTTP request can lead…CVE-2020-13587Rukovoditel · CVSS 5.4 · 1.5% likely

   CWE-89

7. Rukovoditel v3.2.1 was discovered to contain a SQL injection vulnerability via the reports_id parameter.CVE-2022-43168Rukovoditel · CVSS 9.8 · 1.1% likely

   CWE-89

8. Rukovoditel v3.2.1 was discovered to contain a SQL injection vulnerability via the order_by parameter at /rukovoditel/index.php?module=logs/view&type=php.CVE-2022-43288Rukovoditel · CVSS 8.8 · 1.0% likely

   CWE-89

9. An exploitable SQL injection vulnerability exists in the ‘entities/fields’ page of the Rukovoditel Project Management App 2.7.2. The entities_id parameter in the 'entities/fields…CVE-2020-13589Rukovoditel · CVSS 5.4 · 1.0% likely

   CWE-89

10. An exploitable SQL injection vulnerability exists in the ‘entities/fields’ page of the Rukovoditel Project Management App 2.7.2. The heading_field_id parameter in ‘‘entities/field…CVE-2020-13588Rukovoditel · CVSS 5.4 · 1.0% likely

    CWE-89

11. Rukovoditel v3.2.1 was discovered to contain a SQL injection vulnerability via the heading_field_id parameter.CVE-2022-44945Rukovoditel · CVSS 9.8 · 1.0% likely

    CWE-89

12. Multiple exploitable SQL injection vulnerabilities exist in the 'entities/fields' page of the Rukovoditel Project Management App 2.7.2. A specially crafted HTTP request can lead t…CVE-2020-13590Rukovoditel · CVSS 5.4 · 0.9% likely

    CWE-89

exploited in the wildcheck availableringed, named or not: CyberSIXT has reported on it

Zoom in on the map and the dots under the middle of it are named where they are.