Approved changes feed: RSS · Atom

cpe:2.3:a:rukovoditel:rukovoditel:3.2.1:*:*:*:*:*:*:*

part: a version: 3.2.1 update: *

VendorRukovoditel (43cc348a-3cf0-589d-a12c-52976d3ecadc)
ProductRukovoditel (af15ae84-bbc3-5b06-ab63-db60a3460443)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
pkg:docker/filipmil/rukovoditel purl2cpe 2026-06-01 10:13:47.284526
pkg:github/rukovoditel/rukovoditel purl2cpe 2026-06-01 10:13:47.284527
pkg:sourceforge/rukovoditel purl2cpe 2026-06-01 10:13:47.284529

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2022-48175 vulnerable 2026-06-08 05:50:41.240891 Details available
Rukovoditel v3.2.1 was discovered to contain a remote code execution (RCE) vulnerability in the component /rukovoditel/index.php?module=dashboard/ajax_request.
Published: 2023-01-30T00:00:00.000Z
Updated: 2025-03-28T14:13:24.627Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-45020 vulnerable 2026-06-08 05:50:35.089691 Details available
Rukovoditel v3.2.1 was discovered to contain a DOM-based cross-site scripting (XSS) vulnerability in the component /rukovoditel/index.php?module=users/login. This vulnerability allows attackers to cause a Denial of Service (DoS) via a crafted GET request.
Published: 2022-12-05T00:00:00.000Z
Updated: 2025-04-24T13:53:09.526Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-44952 vulnerable 2026-06-08 05:50:35.055493 Details available
Rukovoditel v3.2.1 was discovered to contain a stored cross-site scripting (XSS) vulnerability in /index.php?module=configuration/application. This vulnerability allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the Copyright Text field after clicking "Add".
Published: 2022-12-02T00:00:00.000Z
Updated: 2026-07-09T00:22:37.129Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-44951 vulnerable 2026-06-08 05:50:35.055025 Details available
Rukovoditel v3.2.1 was discovered to contain a stored cross-site scripting (XSS) vulnerability in the Add New Form tab function at /index.php?module=entities/forms&entities_id=24. This vulnerability allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the Name field.
Published: 2022-12-02T00:00:00.000Z
Updated: 2026-07-09T00:22:35.906Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-44950 vulnerable 2026-06-08 05:50:35.054590 Details available
Rukovoditel v3.2.1 was discovered to contain a stored cross-site scripting (XSS) vulnerability in the Add New Field function at /index.php?module=entities/fields&entities_id=24. This vulnerability allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the Name field.
Published: 2022-12-02T00:00:00.000Z
Updated: 2026-07-09T00:22:34.684Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-44949 vulnerable 2026-06-08 05:50:35.054048 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-44948 vulnerable 2026-06-08 05:50:35.053689 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-44947 vulnerable 2026-06-08 05:50:35.053197 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-44946 vulnerable 2026-06-08 05:50:35.052684 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-44945 vulnerable 2026-06-08 05:50:35.052197 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-44944 vulnerable 2026-06-08 05:50:35.051545 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-43288 vulnerable 2026-06-08 05:49:31.255138 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-43185 vulnerable 2026-06-08 05:49:31.172684 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-43170 vulnerable 2026-06-08 05:49:31.163493 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-43169 vulnerable 2026-06-08 05:49:31.163080 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-43168 vulnerable 2026-06-08 05:49:31.162663 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-43167 vulnerable 2026-06-08 05:49:31.162325 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-43166 vulnerable 2026-06-08 05:49:31.161872 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-43165 vulnerable 2026-06-08 05:49:31.161339 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-43164 vulnerable 2026-06-08 05:49:31.160794 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.