Skip to content
OpenAdvisories

Vendor

Rukovoditel

5 known vulnerabilities.

Products

Rukovoditel 3 Rukovoditel CRM 1 Project Management App 1
All Critical High Medium Low Exploited only Public exploit

3 results · Clear filters · Feed

  • Medium 5.4
    CVE-2023-53898

    Rukovoditel 3.4.1 Multiple Stored Cross-Site Scripting via Configuration

    Rukovoditel 3.4.1 contains a stored cross-site scripting vulnerabilities that allow authenticated attackers to inject malicious scripts. Attackers can insert iframe and script payloads in application copyright text to execute arbitrary JavaScript in victim br…

    Rukovoditel Rukovoditel
  • Medium 5.4
    CVE-2023-53897

    Rukovoditel 3.4.1 Multiple Stored Cross-Site Scripting via Comments

    Rukovoditel 3.4.1 contains multiple stored cross-site scripting vulnerabilities that allow authenticated attackers to inject malicious scripts. Attackers can insert XSS payloads in project task comments to execute arbitrary JavaScript in victim browsers.

    Rukovoditel Rukovoditel
  • Medium 5.4
    CVE-2020-13590

    Multiple exploitable SQL injection vulnerabilities exist in the 'entities/fields' page of the Rukovoditel Project Manag…

    Rukovoditel Project Management App