Skip to content
OpenAdvisories

Vendor

Rukovoditel

5 known vulnerabilities.

1 result · Clear filters · Feed

  • High 8.8

    Rukovoditel 3.3.1 CSV Injection via User Account Export

    Rukovoditel 3.3.1 contains a CSV injection vulnerability that allows authenticated users to inject malicious formulas into the firstname field. Attackers can craft payloads like =calc|a!z| to trigger code execution when an admin exports customer data as a CSV…