Rukovoditel

Submit a proposal Propose CVE/GCVE/GHSA reference

Approved changes feed: RSS · Atom

cpe:2.3:a:n/a:rukovoditel:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorN/A (22f567d3-1203-528c-8f0e-3eb9c2f6ca78)
ProductRukovoditel (e176f1c2-1b4c-5a8a-98b4-7e8096c3fbaa)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2020-13592 vulnerable 2026-06-08 05:18:00.832011 Details available
MEDIUM (5.4)
An exploitable SQL injection vulnerability exists in "global_lists/choices" page of the Rukovoditel Project Management App 2.7.2. A specially crafted HTTP request can lead to SQL injection. An attacker can make an authenticated HTTP request to trigger this vulnerability, this can be done either with administrator credentials or through cross-site request forgery.
Published: 2021-04-09T17:48:02.000Z
Updated: 2024-08-04T12:25:16.142Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2020-13591 vulnerable 2026-06-08 05:18:00.831540 Details available
MEDIUM (5.4)
An exploitable SQL injection vulnerability exists in the "access_rules/rules_form" page of the Rukovoditel Project Management App 2.7.2. A specially crafted HTTP request can lead to SQL injection. An attacker can make an authenticated HTTP request to trigger this vulnerability, this can be done either with administrator credentials or through cross-site request forgery.
Published: 2021-04-09T17:45:16.000Z
Updated: 2024-08-04T12:25:16.311Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2020-13589 vulnerable 2026-06-08 05:18:00.829056 Details available
MEDIUM (5.4)
An exploitable SQL injection vulnerability exists in the ‘entities/fields’ page of the Rukovoditel Project Management App 2.7.2. The entities_id parameter in the 'entities/fields page (mulitple_edit or copy_selected or export function) is vulnerable to authenticated SQL injection. An attacker can make authenticated HTTP requests to trigger this vulnerability, this can be done either with administrator credentials or through cross-site request forgery.
Published: 2021-08-17T19:14:20.000Z
Updated: 2024-08-04T12:25:16.113Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2020-13588 vulnerable 2026-06-08 05:18:00.828686 Details available
MEDIUM (5.4)
An exploitable SQL injection vulnerability exists in the ‘entities/fields’ page of the Rukovoditel Project Management App 2.7.2. The heading_field_id parameter in ‘‘entities/fields’ page is vulnerable to authenticated SQL injection. An attacker can make authenticated HTTP requests to trigger this vulnerability, this can be done either with administrator credentials or through cross-site request forgery.
Published: 2021-08-17T19:14:19.000Z
Updated: 2024-08-04T12:25:16.108Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2020-13587 vulnerable 2026-06-08 05:18:00.827404 Details available
MEDIUM (5.4)
An exploitable SQL injection vulnerability exists in the "forms_fields_rules/rules" page of the Rukovoditel Project Management App 2.7.2. A specially crafted HTTP request can lead to SQL injection. An attacker can make an authenticated HTTP request to trigger this vulnerability, this can be done either with administrator credentials or through cross-site request forgery.
Published: 2021-04-09T17:47:40.000Z
Updated: 2024-08-04T12:25:16.167Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.